CRITICAL 9.8
GHSA-wj6h-7chw-x4h2
Command injection in get-git-data
Details
get-git-data through 1.3.1 is vulnerable to Command Injection. It is possible to inject arbitrary commands as part of the arguments provided to get-git-data.
Are you affected?
Enter the version of the package you're using.
Affected packages
npm / get-git-data
Introduced in:
0 No fixed version published yet for get-git-data (npm). Pin to a known-safe version or switch to an alternative.