description: gulp-tape through 1.0.0 allows execution of arbitrary commands. It is possible to inject arbitrary commands as part of 'gulp-tape' options.
problem types: Command Injection
affected:
{
product: gulp-tape
vendor: n/a
versions:
status: affected, version: All versions including 1.0.0
}