critical9.8
CVE-2020-7645
chrome-launcher subject to OS Command Injection
Impact
chrome-launcher prior to 0.13.2 is subject to OS Command Injection via the `$HOME` environment variable in Linux operating systems. This issue is patched in version 0.13.2.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| npm | chrome-launcher | < 0.13.2 | 0.13.2 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Chrome-Launcher | before 0.13.2 |