CVE-2020-7640

Publication date

2020-04-27 21:34:45

Family

snyk

State

PUBLISHED

Description

pixl-class prior to 1.0.3 allows execution of arbitrary commands. The members argument of the create function can be controlled by users without any sanitization.