You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
@npmcli/git is an A utility for spawning git from npm CLI contexts.
Affected versions of this package are vulnerable to Command Injection due to improper argument sanitization when npmcli/git is used to execute Git commands based on user controlled input.
Affecting Packages/Plugins
Overview
@npmcli/git is an A utility for spawning git from npm CLI contexts.
Affected versions of this package are vulnerable to Command Injection due to improper argument sanitization when
npmcli/git
is used to execute Git commands based on user controlled input.Remediation
Upgrade
@npmcli/git
to version 2.0.8 or higher.References
The text was updated successfully, but these errors were encountered: