This affects all versions of package sonar-wrapper. The injection point is located in lib/sonarRunner.js.
Windows Console Driver Denial of Service Vulnerability This CVE ID is unique from CVE-2021-28443.
Windows Console Driver Denial of Service Vulnerability This CVE ID is unique from CVE-2021-28438.
UCMS v1.6 was discovered to contain an arbitrary file deletion vulnerability.