description: A command injection vulnerability in the `devcert` module may lead to remote code execution when users of the module pass untrusted input to the `certificateFor` function.
problem types: Command Injection - Generic (CWE-77)
affected:
{
product: devcert
vendor: n/a
versions:
status: affected, version: Fixed Version: 1.1.1
}