CVE-2017-1000451

CVE-2017-1000451 affects fs-git version 1.0.1, a file-system-like API for Git repositories. The root cause is the buildCommand function used to construct exec strings not sanitizing input, making any code path that calls child_process.exec vulnerable to command injection. This could allow an atta...