Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
All versions of package git-clone is vulnerable to Command Injection due to insecure usage of the –upload-pack feature of git.
Advisories for Npm/Git-Clone package
2022