Threats tagged 'ghsa-745r-gxf5-fh45'

A command injection vulnerability exists in the createProject function of the src/core/projects.ts file in MauricioMilano coder-api versions up to 1.1.0. The vulnerability requires local access to exploit and can lead to limited confidentiality, integrity, and availability impacts. The project maintainers have been informed but have not yet responded or issued a fix.