Description
All versions of package git-archive are vulnerable to Command Injection via the exports function.
Remediation
References
https://security.snyk.io/vuln/SNYK-JS-GITARCHIVE-1050391
Related Vulnerabilities
CVE-2022-27263 Vulnerability in npm package strapi
CVE-2022-24723 Vulnerability in npm package urijs
CVE-2015-8855 Vulnerability in maven package org.webjars.bower:semver
CVE-2021-23509 Vulnerability in npm package json-ptr
CVE-2018-11040 Vulnerability in maven package org.springframework:spring-webmvc