A command injection vulnerability in the `devcert` module may lead to remote code execution when users of the module pass untrusted input to the `certificateFor` function.
| Package (Ecosystem) | Introduced | Fixed | Limit |
|---|---|---|---|
| devcert(npm) | 0 | 1.1.2 | N/A |
CVSS Metrics
