Severity: Critical
CVSS Score: 9.8
Lack of output sanitization allowed an attack to execute arbitrary shell commands via the logkitty npm package before version 0.7.1.