description: NPM package gitlabhook version 0.0.17 is vulnerable to a Command Injection vulnerability. Arbitrary commands can be injected through the repository name.
problem types: OS Command Injection (CWE-78)
affected:
{
product: gitlabhook
vendor: n/a
versions:
status: affected, version: Not Fixed
}