critical9.8
CVE-2020-28430
Command Injection in nuance-gulp-build-common
Impact
All versions of package nuance-gulp-build-common are vulnerable to Command Injection via the index.js file. **PoC:** ```js var a = require("nuance-gulp-build-common") a.run("touch JHU") ```
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| npm | nuance-gulp-build-common | <= 0.0.1 | none recorded |