npm/git-tags-remote: high 7.2
Command Injection in git-tags-remote
Action: Upgrade git-tags-remote to 1.0.4 or later.
npm i git-tags-remote@1.0.4Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.0.4 | - |
Fixed versions
| 1.0.4 |
Sources
- osv: GHSA-gm9x-q798-hmr4
- https://github.com/sh0ji/git-tags-remote/issues/58
- https://github.com/sh0ji/git-tags-remote/commit/a20488960cbd2c98455386108253094897ebfc1c
- https://github.com/sh0ji/git-tags-remote
- https://www.npmjs.com/advisories/1517
published · modified · JSON