Description
Versions of `ungit` prior to 0.9.0 are affected by a command injection vulnerability in the `url` parameter.
## Recommendation
Update version 0.9.0 or later.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| npm | ungit | < 0.9.0 | 0.9.0 | GHSA-vjfr-p6hp-jqqw |