Skip to content
Not rated

CVE-2020-7607 gulp-styledocco through 0.0.3 allows execution of arbitrary commands

Description

gulp-styledocco through 0.0.3 allows execution of arbitrary commands. The argument 'options' of the exports function in 'index.js' can be controlled by users without any sanitization.

Affected products and versions

Product Affected versions Fixed in
gulp-styledocco Versions not published
Track this CVE