| Package | Affected versions | Patched versions |
|---|---|---|
| github-todos | ≤ 3.1.0 | |
| github-todos | ≤ 3.1.0 |
naholyr github-todos 3.1.0 is vulnerable to command injection. The range argument for the _hook subcommand is concatenated without any validation, and is directly used by the exec function.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free