VYPR

Diez

by Haikuforteams

CVEs (1)

  • CVE-2021-32830LowAug 17, 2021
    risk 0.26cvss 3.9epss 0.02

    The @diez/generation npm package is a client for Diez. The locateFont method of @diez/generation has a command injection vulnerability. Clients of the @diez/generation library are unlikely to be aware of this, so they might unwittingly write code that contains a vulnerability.…