CVE-2020-7607

Publication date

2020-03-15 21:40:50

Family

snyk

State

PUBLISHED

Description

gulp-styledocco through 0.0.3 allows execution of arbitrary commands. The argument options of the exports function in index.js can be controlled by users without any sanitization.