Skip to content
OpenAdvisories

Vendor

diez

1 known vulnerabilities.

Products

diez 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Low 3.9
    CVE-2021-32830

    Command injection in @diez/generation

    The @diez/generation npm package is a client for Diez. The locateFont method of @diez/generation has a command injection vulnerability. Clients of the @diez/generation library are unlikely to be aware of this, so they might unwittingly write code that contain…

    diez diez @diez/generation npm