Withdrawn Advisory: OS Command Injection in effect
## Withdrawn Advisory
This advisory has been withdrawn because the npm package effect
https://www.npmjs.com/package/effect, for which alerts were issued, does not correspond with
https://github.com/Javascipt/effect, the repository with the vulnerable code.
https://github.com/Javascipt/effect is not in any supported ecosystem
https://docs.github.com/en/code-security/security-advisories/working-with-global-security-advisories-from-the-github-advisory-database/about-the-github-advisory-database#github-reviewed-advisories.
Additionally, the CVE Numbering Authority that issued the CVE for CVE-2020-7624 has updated their advisory
https://snyk.io/vuln/SNYK-JS-EFFECT-564256 stating that "This was deemed not a vulnerability."
## Original Description
effect through 1.0.4 is vulnerable to Command Injection. It allows execution of arbitrary command via the options argument.