Description
git-add-remote through 1.0.0 is vulnerable to Command Injection. It allows execution of arbitrary commands via the name argument.
Remediation
References
https://github.com/jonschlinkert/git-add-remote/blob/master/index.js#L21%2C
https://snyk.io/vuln/SNYK-JS-GITADDREMOTE-564269
Related Vulnerabilities
CVE-2023-24815 Vulnerability in maven package io.vertx:vertx-web
CVE-2020-6858 Vulnerability in maven package com.hotels.styx:styx-server
CVE-2020-14966 Vulnerability in maven package org.webjars.bower:jsrsasign
CVE-2023-38286 Vulnerability in maven package de.codecentric:spring-boot-admin-server
CVE-2022-1466 Vulnerability in maven package org.keycloak:keycloak-core