Command Injection

fs-git is vulnerable to command injection attacks. These attacks are possible because the buildCommand function doesn’t sanitize data before constructing exec strings, allowing attackers to insert and execute commands.