This affects the package madge before 4.0.1. It is possible to specify a custom Graphviz path via the graphVizPath option parameter which when the .image(), .svg() or .dot() functions are called, is executed by the childprocess.exec function.
Metrics
Affected Vendors & Products
References
History
No history.

Status: PUBLISHED
Assigner: snyk
Published: 2021-03-09T18:30:23.064433Z
Updated: 2024-09-16T23:11:05.188Z
Reserved: 2021-01-08T00:00:00
Link: CVE-2021-23352

No data.

Status : Modified
Published: 2021-03-09T19:15:12.860
Modified: 2024-11-21T05:51:33.480
Link: CVE-2021-23352

No data.