HIGH7.8
GHSA-6m8p-4fxj-pgc2
OS Command Injection in mversion
Quick fix
GHSA-6m8p-4fxj-pgc2 — mversion: upgrade to the fixed version with the command below.
npm install mversion@2.0.1Details
The issue occurs because tagName user input is formatted inside the exec function is executed without any checks.
Are you affected?
Enter the version of the package you're using.