Description
All versions of package git-archive are vulnerable to Command Injection via the exports function.
Remediation
References
https://security.snyk.io/vuln/SNYK-JS-GITARCHIVE-1050391
Related Vulnerabilities
CVE-2016-4999 Vulnerability in maven package org.dashbuilder:dashbuilder-dataset-sql
CVE-2022-36127 Vulnerability in npm package skywalking-backend-js
CVE-2018-3744 Vulnerability in npm package html-pages
CVE-2020-8237 Vulnerability in maven package org.webjars.npm:json-bigint
CVE-2019-10314 Vulnerability in maven package org.jenkins-ci.plugins:koji