Description

All versions of package git-archive are vulnerable to Command Injection via the exports function.

Remediation

References

https://security.snyk.io/vuln/SNYK-JS-GITARCHIVE-1050391

Related Vulnerabilities

CVE-2021-23383 Vulnerability in maven package org.webjars.npm:handlebars

CVE-2018-1000665 Vulnerability in npm package dojo

CVE-2019-1003028 Vulnerability in maven package org.jenkins-ci.plugins:jms-messaging

CVE-2017-16059 Vulnerability in npm package mssql-node

CVE-2018-6873 Vulnerability in npm package auth0-js

Severity

High

Classification

CWE-77 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Tags

Third Party Advisory