Description
All versions of package git-archive are vulnerable to Command Injection via the exports function.
Remediation
References
https://security.snyk.io/vuln/SNYK-JS-GITARCHIVE-1050391
Related Vulnerabilities
CVE-2020-6426 Vulnerability in maven package org.webjars.npm:electron
CVE-2019-10768 Vulnerability in npm package angular
CVE-2018-20000 Vulnerability in maven package org.bedework:bw-webdav
CVE-2020-28442 Vulnerability in npm package js-data
CVE-2017-3162 Vulnerability in maven package org.apache.hadoop:hadoop-hdfs