CVE-2020-7619

https://notcve.org/view.php?id=CVE-2020-7619

02 Apr 2020 — get-git-data through 1.3.1 is vulnerable to Command Injection. It is possible to inject arbitrary commands as part of the arguments provided to get-git-data. get-git-data versiones hasta 1.3.1, es vulnerable a una Inyección de Comandos. Es posible inyectar comandos arbitrarios como parte de los argumentos proporcionados en get-git-data. • https://github.com/chardos/get-git-data/blob/master/index.js#L7%2C • CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') •