CRITICAL9.8
GHSA-53xj-v576-3ch2
OS Command Injection in giting
Details
giting version prior to 0.0.8 allows execution of arbritary commands. The first argument `repo` of function `pull()` is executed by the package without any validation.
Are you affected?
Enter the version of the package you're using.
Affected packages
npm/giting
Introduced in:
0No fixed version published yet for giting (npm). Pin to a known-safe version or switch to an alternative.