sync-exec

sync-exec copied to clipboard

Security Fix for Insecure use of Tmp files - huntr.dev

1

https://huntr.dev/users/mufeedvh has fixed the Insecure use of Tmp files vulnerability 🔨. mufeedvh has been awarded $25 for fixing the vulnerability through the huntr bug bounty program 💵. Think you could...

huntr-helper

Insecure temporary directores

2

The module uses temporary directories but creates them in an insecure way. Besides general issues related to making of tmp files, the implementation in sync-exec/coffee/lib/create-pipes.coffee does not handle errors. The...

maxnikulin

Replace mkdir with mkdirSync in create-pipes, so error thrown (e.g. on directory existed) would be properly caught. Currently on directory collision, the asynchronous mkdir's error would not be caught and...

darkkelvin

It seems that I have faced file descriptor leak in sync-exec ``` javascript var syncExec = require('sync-exec'); var i = 0; try { for (; i < 1000; ++i) {...

maxnikulin

The object coming out of `child_process.execSync` has the following properties: ``` pid Number Pid of the child process output Array Array of results from stdio output stdout Buffer|String The contents...

timoxley

ljharb