@acrontum/filesystem-template@0.0.1 vulnerabilities

Filesystem templating engine and project scaffolding tool

Direct Vulnerabilities

Known vulnerabilities in the @acrontum/filesystem-template package. This does not include vulnerabilities belonging to this package’s dependencies.

Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.
Fix for free
Vulnerability Vulnerable Version
  • C
Arbitrary Command Injection

@acrontum/filesystem-template is a Filesystem templating engine and project scaffolding tool

Affected versions of this package are vulnerable to Arbitrary Command Injection due to the fetchRepo API missing sanitization of the href field of external input.

How to fix Arbitrary Command Injection?

Upgrade @acrontum/filesystem-template to version 0.0.2 or higher.

<0.0.2