npm/@npmcli/git: medium

Arbitrary Command Injection due to Improper Command Sanitization

Action: Upgrade @npmcli/git to 2.0.8 or later.

npm i @npmcli/git@2.0.8

Affected

Fixed versions

Sources

• osv: GHSA-hxwm-x553-x359
• https://github.com/npm/git/security/advisories/GHSA-hxwm-x553-x359
• https://github.com/npm/git/pull/29

published 2021-08-05T17:07:39Z · modified 2021-08-02T19:02:32Z · JSON