Description
The gnuplot package prior to version 0.1.0 for Node.js allows code execution via shell metacharacters in Gnuplot commands.
Remediation
References
https://github.com/rkesters/gnuplot/commit/23671d4d3d28570fb19a936a6328bfac742410de
https://www.npmjs.com/package/%40rkesters/gnuplot
Related Vulnerabilities
CVE-2019-17563 Vulnerability in maven package org.apache.tomcat:tomcat-catalina
CVE-2020-28196 Vulnerability in npm package krb5
CVE-2018-14380 Vulnerability in npm package graylog-web-interface
CVE-2021-4103 Vulnerability in npm package vditor
CVE-2021-23439 Vulnerability in npm package file-upload-with-preview