OS Command Injection

mversion is vulnerable to OS Command Injection. The vulnerability exists as the value of tagName in lib/git.js is passed to cp.exec without validation or sanitization, allowing an attacker to inject and execute arbitrary code...

Command Injection

lsof is vulnerable to command injection. The vulnerability exists as the unvalidated value of port is used in cp.exec...