Advisory Database
  • Advisories
  • Dependency Scanning
  1. npm
  2. ›
  3. hubot-scripts
  4. ›
  5. GMS-2013-10

GMS-2013-10: Potential Command Injection

May 16, 2013

Untrusted input passed in to the hubot-scripts/package/src/scripts/email.coffee module can allow for command injection. This may be unexpected behavior for the caller.

Code Behaviors & Features

Detect and mitigate GMS-2013-10 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →

Affected versions

All versions up to 2.4.3

Fixed versions

  • 2.4.5

Solution

Do not use the email script (it's not enabled by default) or upgrade to latest version.

Source file

npm/hubot-scripts/GMS-2013-10.yml

Spotted a mistake? Edit the file on GitLab.

  • Site Repo
  • About GitLab
  • Terms
  • Privacy Statement
  • Contact

Page generated Wed, 14 May 2025 12:16:03 +0000.