CRITICAL
GHSA-vjfr-p6hp-jqqw
Command Injection in ungit
Quick fix
GHSA-vjfr-p6hp-jqqw — ungit: upgrade to the fixed version with the command below.
npm install ungit@0.9.0Details
Versions of `ungit` prior to 0.9.0 are affected by a command injection vulnerability in the `url` parameter.
## Recommendation
Update version 0.9.0 or later.
Are you affected?
Enter the version of the package you're using.