2020-08-30 07:15:16
snyk
PUBLISHED
This affects the package json before 10.0.0. It is possible to inject arbritary commands using the parseLookup function.