CVE-2022-24377

Publication date

2022-12-15 03:44:03

Family

snyk

State

PUBLISHED

Description

The package cycle-import-check before 1.3.2 are vulnerable to Command Injection via the writeFileToTmpDirAndOpenIt function due to improper user-input sanitization.