CRITICAL 9.8
GHSA-wj6h-7chw-x4h2
Command injection in get-git-data
상세
get-git-data through 1.3.1 is vulnerable to Command Injection. It is possible to inject arbitrary commands as part of the arguments provided to get-git-data.
이 버전이 영향받나요?
사용 중인 패키지 버전을 입력하면 즉시 평가합니다.
영향 패키지
npm / get-git-data
최초 영향 버전:
0 No fixed version published yet for get-git-data (npm). Pin to a known-safe version or switch to an alternative.