What is GHSA-wq8f-xmq3-5vq9?

GHSA-wq8f-xmq3-5vq9 is a security advisory published by GitHub Security Advisories with Critical severity. Remote code execution in broccoli-compass

Which CVE IDs does GHSA-wq8f-xmq3-5vq9 cover?

GHSA-wq8f-xmq3-5vq9 covers the following CVE IDs: CVE-2023-27848. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-wq8f-xmq3-5vq9?

GHSA-wq8f-xmq3-5vq9 has a CVSS v3 base score of 9.8, published by GitHub Security Advisories.

Which products are affected by GHSA-wq8f-xmq3-5vq9?

GHSA-wq8f-xmq3-5vq9 affects 1 product, including: npm/broccoli-compass:\u003c= 0.2.4.

GHSA-wq8f-xmq3-5vq9CriticalCVSS 9.8

Remote code execution in broccoli-compass

Vendor

GitHub Security Advisories

Published

April 24, 2023

Last Modified

November 10, 2023

🔗 CVE IDs covered (1)

CVE-2023-27848 →

📋 Description

broccoli-compass v0.2.4 was discovered to contain a remote code execution (RCE) vulnerability via the child_process function.

🎯 Affected products1

npm/broccoli-compass:<= 0.2.4

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2023-27848
https://github.com/omnitaint/Vulnerability-Reports/blob/9d65add2bca71ed6d6b2e281ee6790a12504ff8e/reports/broccoli-compass/report.md
https://www.npmjs.com/package/broccoli-compass
https://github.com/advisories/GHSA-wq8f-xmq3-5vq9