Severity: Critical
CVSS Score: 9.8
This affects all versions of package gitblame. The injection point is located in line 15 in lib/gitblame.js.