description: jscover through 1.0.0 is vulnerable to Command Injection. It allows execution of arbitrary command via the source argument.
problem types: Command Injection
affected:
{
product: jscover
vendor: n/a
versions:
status: affected, version: All versions including 1.0.0
}