Description
The package cycle-import-check before 1.3.2 are vulnerable to Command Injection via the writeFileToTmpDirAndOpenIt function due to improper user-input sanitization.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | cycle-import-check | unspecified – < 1.3.2 | 1.3.2 |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| npm | cycle-import-check | < 1.3.2 | 1.3.2 | GHSA-995x-33wq-8gc9 |