VYPR

Madge

by Madge Project

CVEs (1)

  • CVE-2021-23352HigMar 9, 2021
    risk 0.49cvss 8.6epss 0.02

    This affects the package madge before 4.0.1. It is possible to specify a custom Graphviz path via the graphVizPath option parameter which when the .image(), .svg() or .dot() functions are called, is executed by the childprocess.exec function.