{"id":"CVE-2021-32684","aliases":["GHSA-52qp-gwwh-qrg4"],"url":"https://o3.security/vulnerability/CVE-2021-32684","summary":"Missing Handler in @scandipwa/magento-scripts","details":"### Impact\nAfter changing the function from synchronous to asynchronous there wasn't implemented handler in the [start](https://docs.create-magento-app.com/getting-started/available-commands/start), [stop](https://docs.create-magento-app.com/getting-started/available-commands/stop), [exec](https://docs.create-magento-app.com/getting-started/available-commands/exec) and [logs](https://docs.create-magento-app.com/getting-started/available-commands/logs) commands, effectively making them unusable.\n\n### Patches\n[Version 1.5.3](https://github.com/scandipwa/create-magento-app/releases/tag/%40scandipwa%2Fmagento-scripts%401.5.3) contains patches for the problems described above.\n\n### Workarounds\nUpgrade to patched or latest (recommended) version `npm i @scandipwa/magento-scripts@1.5.3` or `npm i @scandipwa/magento-scripts@latest`.\n\n### References\nNew releases always available here: https://github.com/scandipwa/create-magento-app/releases\n\n### For more information\nIf you have any questions or comments about this advisory:\n* Open an issue in [create-magento-app](https://github.com/scandipwa/create-magento-app/issues)\n","published":"2021-06-14T23:15:07.547Z","modified":"2026-07-09T11:23:55.625449Z","cvss":{"score":5.5,"severity":"MEDIUM","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"},"epss":null,"cisaKev":null,"exploitsKnown":null,"affectedPackages":[{"ecosystem":"npm","name":"@scandipwa/magento-scripts","fixedVersion":"1.5.3"}],"fix":{"url":"https://github.com/scandipwa/create-magento-app/commit/89115db7031e181eb8fb4ec2822bc6cab88e7071","label":"scandipwa/create-magento-app@89115db"},"references":[{"type":"FIX","url":"https://github.com/scandipwa/create-magento-app/commit/89115db7031e181eb8fb4ec2822bc6cab88e7071"},{"type":"FIX","url":"https://github.com/scandipwa/create-magento-app/security/advisories/GHSA-52qp-gwwh-qrg4"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2021-32684"}],"provenance":{"sources":["OSV.dev","FIRST.org (EPSS)"],"lastVerified":"2026-07-09T11:23:55.625449Z"}}