Advisory Weakness Curation

Command Injection in ungit Versions of `ungit` prior to 0.9.0 are affected by a command injection vulnerability in the `url` parameter. ## Recommendation Update version 0.9.0 or later.

Command Injection Due to the use of `child_process.exec` when executing git commands, ungit allows for commands to be injectied from user input fields that end up in an executed git command.