Description
All versions of package font-converter are vulnerable to Arbitrary Command Injection due to missing sanitization of input that potentially flows into the child_process.exec() function.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | font-converter | < unspecified | unspecified |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| npm | font-converter | <= 1.1.1 | — | GHSA-g2c3-vwff-m3xr |