Advisories for Npm/Umount package

umount is vulnerable to Command Injection. The argument device can be controlled by users without any sanitization.