Haiku for Teams Diez for Node.js

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:haikuforteams:diez:-:*:*:*:*:node.js:*:*

part: a version: - update: *

VendorHaikuforteams (5ef8f9d6-fe77-5d87-a313-2efc2b68ede5)
ProductDiez (acfd39c3-45ff-5b5b-86da-373aaaed623f)
Edition*
Language*
Software edition*
Target softwarenode.js
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/diez/diez purl2cpe 2026-06-01 10:15:33.945876
pkg:npm/%40diez/generation purl2cpe 2026-06-01 10:15:33.945877

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-32830 vulnerable 2026-06-08 05:32:08.128329 Details available
LOW (3.9)
The @diez/generation npm package is a client for Diez. The locateFont method of @diez/generation has a command injection vulnerability. Clients of the @diez/generation library are unlikely to be aware of this, so they might unwittingly write code that contains a vulnerability. This issue may lead to remote code execution if a client of the library calls the vulnerable method with untrusted input. All versions of this package are vulnerable as of the writing of this CVE.
Published: 2021-08-17T18:00:13.000Z
Updated: 2024-08-03T23:33:55.856Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.