Description
fs-path node module before 0.0.25 is vulnerable to command injection by way of user-supplied inputs via the `copy`, `copySync`, `remove`, and `removeSync` methods.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | fs-path | Fixed in 0.0.25 | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| npm | fs-path | < 0.0.25 | 0.0.25 | GHSA-8mrf-64fw-2x75 |