CVE-2020-36381

Name of the Vulnerable Software and Affected Versions: aaptjs version 1.3.1

Description: An issue was discovered in the singleCrunch function, allowing attackers to execute arbitrary code via the filePath parameters. This issue affects the aaptjs package, which is a node wrapper for aapt.

Recommendations: For aaptjs version 1.3.1, consider disabling the singleCrunch function as a temporary workaround until a patch is available. Restrict access to the filePath parameters in the affected function to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.