Advisories for Npm/Rpi package

2020

Injection Vulnerability

rpi allows execution of arbitrary commands. The variable pinNumber in function GPIO within src/lib/gpio.js is used as part of the arguments to the exec function without any sanitization.