Command Injection issue in processPicker.ts
Open
- Dominant language
- TypeScript
- Stars
- 3.1k
- Forks
- 737
- Avg merge
- 17h 56m
- Merged PRs (30d)
- 21
Description
## Environment data
I used Fortify_SCA 22.2.2 to scan vscode-csharp 1.23.11
## Scan results
Sink Location: src/features/processPicker.ts:504
Code Snippet:
// Execute the process with proper command and arguments
execFile(command, args, { cwd: workingDirectory, maxBuffer: 500 * 1024 }, (error: Error | null, stdout: string, stderr: string) => {
if (error) {
reject(error);
Contributor guide
Assessment
This issue has not been assessed yet.