Description
The gnuplot package prior to version 0.1.0 for Node.js allows code execution via shell metacharacters in Gnuplot commands.
Remediation
References
https://github.com/rkesters/gnuplot/commit/23671d4d3d28570fb19a936a6328bfac742410de
https://www.npmjs.com/package/%40rkesters/gnuplot
Related Vulnerabilities
CVE-2022-23710 Vulnerability in maven package org.elasticsearch:elasticsearch
CVE-2023-24057 Vulnerability in maven package ca.uhn.hapi.fhir:org.hl7.fhir.r5
CVE-2023-3414 Vulnerability in maven package io.jenkins.plugins:servicenow-devops
CVE-2022-25929 Vulnerability in npm package smoothie
CVE-2018-14042 Vulnerability in maven package org.webjars.bower:bootstrap