tts-api@2.1.4 vulnerabilities

Text to speech REST API for multiple TTS engines

Known vulnerabilities in the tts-api package. This does not include vulnerabilities belonging to this package’s dependencies.

Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.

Vulnerability	Vulnerable Version
M OS Command Injection tts-api is a Text to speech REST API for multiple TTS engines Affected versions of this package are vulnerable to OS Command Injection via the `onSpeechDone` function of the `app.js` file. An attacker can execute arbitrary OS commands by manipulating the input to the function. How to fix OS Command Injection? Upgrade `tts-api` to version 2.2.0 or higher.	<2.2.0