Description
All versions of package git-archive are vulnerable to Command Injection via the exports function.
Remediation
References
https://security.snyk.io/vuln/SNYK-JS-GITARCHIVE-1050391
Related Vulnerabilities
CVE-2022-2421 Vulnerability in npm package socket.io-parser
CVE-2019-15782 Vulnerability in npm package webtorrent
CVE-2018-11764 Vulnerability in maven package org.apache.hadoop:hadoop-core
CVE-2021-43797 Vulnerability in maven package io.netty:netty-codec-http
CVE-2021-33609 Vulnerability in maven package com.vaadin:vaadin-server