This affects all versions of package spritesheet-js. It depends on a vulnerable package platform-command. The injection point is located in line 32 in lib/generator.js, which is triggered by main entry of the package.
| Package (Ecosystem) | Introduced | Fixed | Limit |
|---|---|---|---|
| spritesheet-js(npm) | 0 | N/A | N/A |
CVSS Metrics