VYPR

npm package

@diez/generation

pkg:npm/%40diez/generation

Vulnerabilities (1)

  • CVE-2021-32830Aug 17, 2021
    affected <= 10.6.0

    The @diez/generation npm package is a client for Diez. The locateFont method of @diez/generation has a command injection vulnerability. Clients of the @diez/generation library are unlikely to be aware of this, so they might unwittingly write code that contains a vulnerability. Th