description: fs-path node module before 0.0.25 is vulnerable to command injection by way of user-supplied inputs via the `copy`, `copySync`, `remove`, and `removeSync` methods.
problem types: Command Injection - Generic (CWE-77)
affected:
{
product: fs-path
vendor: n/a
versions:
status: affected, version: Fixed in 0.0.25
}