Description
The gnuplot package prior to version 0.1.0 for Node.js allows code execution via shell metacharacters in Gnuplot commands.
Remediation
References
https://github.com/rkesters/gnuplot/commit/23671d4d3d28570fb19a936a6328bfac742410de
https://www.npmjs.com/package/%40rkesters/gnuplot
Related Vulnerabilities
CVE-2024-22207 Vulnerability in npm package @fastify/swagger-ui
CVE-2023-26920 Vulnerability in npm package fast-xml-parser
CVE-2022-31183 Vulnerability in maven package co.fs2:fs2-io_sjs1_2.12
CVE-2021-23442 Vulnerability in npm package @cookiex/deep
CVE-2018-1002200 Vulnerability in maven package org.codehaus.plexus:plexus-archiver