9.8
Critical
CVE-2020-7782 This affects all versions of package spritesheet-js
Description
This affects all versions of package spritesheet-js. It depends on a vulnerable package platform-command. The injection point is located in line 32 in lib/generator.js, which is triggered by main entry of the package.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| spritesheet-js | Versions not published |