@cyclonedx/cdxgen vulnerabilities (npm)
3 vulnerabilities.
-
@cyclonedx/cdxgennpm @cyclonedx/cdxgen: Maven project scanning may allow shell command injection through repository-controlled module paths 6.9 Medium -
@cyclonedx/cdxgennpm @cyclonedx/cdxgen: Docker registry auth substring match forwards credentials to a different registry 6.9 Medium -
@cyclonedx/cdxgennpm CycloneDX cdxgen may execute code contained within build-related files 7.2 High