GHSA-52qp-gwwh-qrg4MediumCVSS 6.2

Missing Handler in @scandipwa/magento-scripts

Published
June 21, 2021
Last Modified
February 1, 2023

🔗 CVE IDs covered (1)

CVE-2021-32684 →

📋 Description

Impact

After changing the function from synchronous to asynchronous there wasn't implemented handler in the start, stop, exec and logs commands, effectively making them unusable.

Patches

Version 1.5.3 contains patches for the problems described above.

Workarounds

Upgrade to patched or latest (recommended) version npm i @scandipwa/magento-scripts@1.5.3 or npm i @scandipwa/magento-scripts@latest.

References

New releases always available here: https://github.com/scandipwa/create-magento-app/releases

For more information

If you have any questions or comments about this advisory:

🎯 Affected products1

  • npm/@scandipwa/magento-scripts:>= 1.5.1, < 1.5.3

🔗 References (4)