Description
aegir is a module to help automate JavaScript project management. Version 12.0.0 through and including 12.0.7 bundled and published to npm the user (that performed a aegir-release) GitHub token.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| HackerOne | aegir node module | >=12.0.0 <= 12.0.7 | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| npm | aegir | >= 12.0.0, < 12.0.8 | 12.0.8 | GHSA-6xhf-x49c-m5m6 |