@cyclonedx/cdxgen
npm · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| @cyclonedx/cdxgen: Maven project scanning may allow shell command injection through repository-controlled module paths | @cyclonedx/cdxgen | npm | Medium | Fix reported | |
| @cyclonedx/cdxgen: Docker registry auth substring match forwards credentials to a different registry | @cyclonedx/cdxgen | npm | Medium | Fix reported | |
| CycloneDX cdxgen may execute code contained within build-related files | @cyclonedx/cdxgen | npm | Medium | Fix reported |