OS Command Injection

Overview Affected versions of this package are vulnerable to OS Command Injection via the merge tool. An attacker can execute arbitrary commands by supplying crafted input that is improperly handled during the construction of commands. Remediation Upgrade thor to version 1.4.0 or higher. Referenc...