CVE-2021-32830

Name of the Vulnerable Software and Affected Versions @diez/generation (affected versions not specified)

Description The @diez/generation npm package has a command injection vulnerability in its locateFont method. This issue may lead to remote code execution if a client of the library calls the vulnerable method with untrusted input. Clients of the @diez/generation library are unlikely to be aware of this, so they might unwittingly write code that contains a vulnerability.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.