All versions of the package sketchsvg are vulnerable to Arbitrary Code Injection when invoking shell.exec without sanitization nor parametrization while concatenating the current directory as part of the command string.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
ebay sketchsvg - |
Vulmon