CVE-2021-3190
The async-git package before 1.13.2 for Node.js allows OS Command Injection via shell metacharacters, as demonstrated by git.reset and git.tag.
Published: 2021-01-21 · CVSS: Unscored
The async-git package before 1.13.2 for Node.js allows OS Command Injection via shell metacharacters, as demonstrated by git.reset and git.tag.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7