@oblique/cli vulnerabilities
1 known vulnerability in @oblique/cli from Swiss Federal Office of Information Technology, Systems and Telecommunication. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
1vulnerabilities
0critical
1high
0exploited
7.8average CVSS score
Latest first
- 7.8 High severity
@oblique/cli: Improper Neutralization of Special Elements used in an OS Command
@oblique/cli 15.4.0 contains an OS command injection vulnerability in the project creation functionality. The CLI constructs shell commands through string concatenation and executes them with execSync(). A user-controlled project-name argument is inserted into