Skip to content
OpenAdvisories
Medium · 6.2 CVE-2021-32684 EUVD-2021-1262GHSA-52qp-gwwh-qrg4

Missing Handler in @scandipwa/magento-scripts

Published Jun 14, 2021 · Updated Aug 3, 2024 · Assigned by GitHub_M

Description

magento-scripts contains scripts and configuration used by Create Magento App, a zero-configuration tool-chain which allows one to deploy Magento 2. In versions 1.5.1 and 1.5.2, after changing the function from synchronous to asynchronous there wasn't implemented handler in the start, stop, exec, and logs commands, effectively making them unusable. Version 1.5.3 contains patches for the problems.

Affected products

VendorProductAffectedFixed
scandipwa create-magento-app >= 1.5.1, <= 1.5.2 —

Affected packages

EcosystemPackageAffectedFixedRecord
npm @scandipwa/magento-scripts >= 1.5.1, < 1.5.3 1.5.3 GHSA-52qp-gwwh-qrg4

References