critical9.8
CVE-2020-7605
gulp-tape through 1.0.0 allows execution of arbitrary commands.
Impact
gulp-tape through 1.0.0 allows execution of arbitrary commands. It is possible to inject arbitrary commands as part of 'gulp-tape' options.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Gulp-Tape Project | Gulp-Tape | through 1.0.0 |