Description
All versions of chrome-launcher allow execution of arbitrary commands, by controlling the $HOME environment variable in Linux operating systems.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | chrome-launcher | All versions | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| npm | chrome-launcher | < 0.13.2 | 0.13.2 | GHSA-gp2j-mg4w-2rh5 |