GHSA-52qp-gwwh-qrg4

Source

https://github.com/advisories/GHSA-52qp-gwwh-qrg4

Import Source

https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2021/06/GHSA-52qp-gwwh-qrg4/GHSA-52qp-gwwh-qrg4.json

JSON Data

https://api.osv.dev/v1/vulns/GHSA-52qp-gwwh-qrg4

Aliases

CVE-2021-32684

Published

2021-06-21T17:10:02Z

Modified

2026-07-08T06:28:52Z

Severity

6.2 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator

Summary

Missing Handler in @scandipwa/magento-scripts

Details

Impact

After changing the function from synchronous to asynchronous there wasn't implemented handler in the start, stop, exec and logs commands, effectively making them unusable.

Patches

Version 1.5.3 contains patches for the problems described above.

Workarounds

Upgrade to patched or latest (recommended) version npm i @scandipwa/magento-scripts@1.5.3 or npm i @scandipwa/magento-scripts@latest.

References

New releases always available here: https://github.com/scandipwa/create-magento-app/releases

For more information

If you have any questions or comments about this advisory:

Open an issue in create-magento-app

Database specific

{
    "cwe_ids":  [
        "CWE-670"
    ],
    "github_reviewed":  true,
    "github_reviewed_at":  "2021-06-16T20:15:07Z",
    "nvd_published_at":  "2021-06-14T23:15:00Z",
    "severity":  "MODERATE"
}

References

Affected packages

npm / @scandipwa/magento-scripts

Package

Name: @scandipwa/magento-scripts; View open source insights on deps.dev
Purl: pkg:npm/%40scandipwa/magento-scripts

Affected ranges

Type: SEMVER
Events: Introduced

1.5.1

Fixed

1.5.3

Database specific

source

"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2021/06/GHSA-52qp-gwwh-qrg4/GHSA-52qp-gwwh-qrg4.json"