CVE-2019-5485: OS Command Injection

Severity: Critical

CVSS Score: 10

NPM package gitlabhook version 0.0.17 is vulnerable to a Command Injection vulnerability. Arbitrary commands can be injected through the repository name.