Homepage
About Snyk

image-tiler@0.2.0 vulnerabilities

Create zoom tile pyramids from a large image

Go back to all versions of this package
Report a new vulnerability Found a mistake?

Direct Vulnerabilities

Known vulnerabilities in the image-tiler package. This does not include vulnerabilities belonging to this package’s dependencies.

Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.
Fix for free
Vulnerability Vulnerable Version
  • C
Command Injection

image-tiler is a package that creates zoom tile pyramids from a large image. There are other packages very similar to this one, but none did exactly what I needed, so I made mine.

Affected versions of this package are vulnerable to Command Injection.

PoC

var tile = require("image-tiler").tile;
var tilePromise = tile("& touch 1112","& touch 222","& touch 33",{invertZoom:true});

How to fix Command Injection?

Upgrade image-tiler to version 2.0.2 or higher.

<2.0.2
Go back to all versions of this package