Skip to content
OpenAdvisories

Package · npm

@npmcli/git

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Medium —
    GHSA-hxwm-x553-x359

    Arbitrary Command Injection due to Improper Command Sanitization

    ### Summary There exists a command injection vulnerability in `npmcli/git` versions <2.0.8 which may result in arbitrary shell command execution due to improper argument sanitization when `npmcli/git` is used to execute Git commands based on user controlled i…

    @npmcli/git npm