Advisories for Npm/Ungit package

2022
2015

Command Injection

Due to the use of child_process.exec when executing git commands, ungit allows for commands to be injectied from user input fields that end up in an executed git command.