Description
The gnuplot package prior to version 0.1.0 for Node.js allows code execution via shell metacharacters in Gnuplot commands.
Remediation
References
https://github.com/rkesters/gnuplot/commit/23671d4d3d28570fb19a936a6328bfac742410de
https://www.npmjs.com/package/%40rkesters/gnuplot
Related Vulnerabilities
CVE-2023-49620 Vulnerability in maven package org.apache.dolphinscheduler:dolphinscheduler-dao
CVE-2021-46384 Vulnerability in maven package net.mingsoft:ms-mcms
CVE-2022-36007 Vulnerability in maven package com.github.jlangch:venice
CVE-2021-25914 Vulnerability in npm package object-collider
CVE-2022-25842 Vulnerability in maven package com.alibaba.oneagent:one-java-agent-plugin