get-git-data@1.3.1 vulnerabilities

get the current git commit hash, tag or branch in node

  • latest version

    1.3.1

  • latest non vulnerable version

  • first published

    6 years ago

  • latest version published

    6 years ago

  • licenses detected

  • Direct Vulnerabilities

    Known vulnerabilities in the get-git-data package. This does not include vulnerabilities belonging to this package’s dependencies.

    Fix vulnerabilities automatically

    Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

    Fix for free
    VulnerabilityVulnerable Version
    • M
    Command Injection

    get-git-data is a git repository data in node.

    Affected versions of this package are vulnerable to Command Injection. The argument limit can be controlled by users without any sanitization

    How to fix Command Injection?

    There is no fixed version for get-git-data.

    >=1.3.0