Skip to content
OpenAdvisories

Package · npm

git-tags-remote

1 known vulnerabilities.

1 result · Feed

  • High 7.2

    Command Injection in git-tags-remote

    All versions of `git-tags-remote ` are vulnerable to Command Injection. The package fails to sanitize the repository input and passes it directly to an `exec` call on the `get` function . This may allow attackers to execute arbitrary code in the system if the…