gitblame is vulnerable to command injection. The vulnerability exists because the module.export
function of gitblame.js
does not properly sanitize the file
parameter inside the exec
functionality, allowing an attacker to inject and execute malicious code.