Skip to content
OpenAdvisories

Package · npm

npm-git-publish

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Critical —
    GHSA-49mg-94fc-2fx6

    Command Injection in npm-git-publish

    All versions of `npm-git-publish` are vulnerable to Command Injection. The package fails to sanitize input and passes it directly to an `execSync` call, which may allow attackers to execute arbitrary code in the system. The `publish` function is vulnerable th…

    npm-git-publish npm