Skip to content
OpenAdvisories

Package · npm

wizard-syncronizer

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium —
    GHSA-wgw3-gf4p-62xc

    Command Injection in wizard-syncronizer

    All versions of `wizard-syncronizer` are vulnerable to Command Injection. The package does not validate input on the `cloneAndSync` function and concatenates it to an exec call. This can be abused through a malicious widget containing the payload in the `gitU…

    wizard-syncronizer npm