Description
The package @acrontum/filesystem-template before 0.0.2 are vulnerable to Arbitrary Command Injection due to the fetchRepo API missing sanitization of the href field of external input.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | @acrontum/filesystem-template | unspecified – < 0.0.2 | 0.0.2 |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| npm | @acrontum/filesystem-template | < 0.0.2 | 0.0.2 | GHSA-m2fc-9h5m-29cm |