CVE-2020-28431

Name of the Vulnerable Software and Affected Versions: wc-cmd versions all

Description: The issue concerns command injection via the index.js file in the wc-cmd package. An example of exploitation is provided using the require function to execute a command, such as touch JHU.

Recommendations: For all versions, consider restricting the use of the wc-cmd package until a fix is available. As a temporary workaround, avoid using the require function to execute commands from untrusted sources.