CVE-2020-7629
install-package through 0.4.0 is vulnerable to Command Injection. It allows execution of arbitrary commands via the options argument.
Published: 2020-04-02 · CVSS: Unscored
install-package through 0.4.0 is vulnerable to Command Injection. It allows execution of arbitrary commands via the options argument.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7