[deferred-exec] deferred-exec Command Injection vulnerability

A command injection vulnerability affects all versions of package deferred-exec. The injection point is located in line 42 in lib/deferred-exec.js

References

• https://nvd.nist.gov/vuln/detail/CVE-2020-28438
• https://security.snyk.io/vuln/SNYK-JS-DEFERREDEXEC-1050433
• https://github.com/danheberden/deferred-exec/blob/master/lib/deferred-exec.js#L42
• https://github.com/advisories/GHSA-54w4-2f2p-f48h