GMS-2021-40: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

December 20, 2021

Improper Neutralization of Special Elements used in an OS Command (‘OS Command Injection’) in npm-groovy-lint.

References

github.com/advisories/GHSA-jfh8-c2jp-5v3q
github.com/advisories/GHSA-qc22-qwm9-j8rx
github.com/nvuillam/npm-groovy-lint/commit/0b664519019442052e0190170c2b1c5aff7d72e7
github.com/nvuillam/npm-groovy-lint/issues/194
github.com/nvuillam/npm-groovy-lint/pull/195

Detect and mitigate GMS-2021-40 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →