[blamer] Improper Neutralization of Special Elements used in an OS Command in Blamer

Blamer versions prior to 1.0.1 allows execution of arbitrary commands. It is possible to inject arbitrary commands as part of the arguments provided to blamer.

References

• https://nvd.nist.gov/vuln/detail/CVE-2019-10807
• https://snyk.io/vuln/SNYK-JS-BLAMER-559541
• https://github.com/kucherenko/blamer/commit/5fada8c9b6986ecd28942b724fa682e77ce1e11c
• https://github.com/advisories/GHSA-8cxp-cjm8-fj36