Skip to content
OpenAdvisories
Critical · 10.0 CVE-2018-16462 EUVD-2018-0740GHSA-9jm3-5835-537m

Command Injection in apex-publish-static-files

Published Oct 30, 2018 · Updated Aug 5, 2024 · Assigned by hackerone

Description

A command injection vulnerability in the apex-publish-static-files npm module version <2.0.1 which allows arbitrary shell command execution through a maliciously crafted argument.

Affected products

VendorProductAffectedFixed
— apex-publish-static-files 2.0.1 —

Affected packages

EcosystemPackageAffectedFixedRecord
npm apex-publish-static-files < 2.0.1 2.0.1 GHSA-9jm3-5835-537m

References