Description
A command injection vulnerability in the `devcert` module may lead to remote code execution when users of the module pass untrusted input to the `certificateFor` function.
Remediation
References
https://hackerone.com/reports/863544
Related Vulnerabilities
CVE-2016-10735 Vulnerability in maven package org.webjars.npm:bootstrap-sass
CVE-2021-23379 Vulnerability in npm package portkiller
CVE-2021-23337 Vulnerability in maven package org.fujion.webjars:lodash
CVE-2023-38905 Vulnerability in maven package org.jeecgframework.boot:jeecg-boot-base-core
CVE-2018-20227 Vulnerability in maven package org.eclipse.rdf4j:rdf4j-util