hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-06-15 18:01:10 +02:00
Code Issues Packages Projects Releases Wiki Activity
Files
802d9bda8380a099a05ab8f2839aa41eda591bd2
codeql/javascript/change-notes/2021-07-12-read-pkg.md
Erik Krogh Kristensen 07bc5856db add the cwd option from read-pkg as sink for path-injection
2021-07-12 23:43:15 +02:00

187 B
Raw Blame History

lgtm,codescanning

  • The cwd option from the read-pkg library is recognized as a sink for js/tainted-path. Affected packages are read-pkg