[MEDIUM] OS Command injection in Bolt

PKSA-v1tz-xdz7-sr4b CVE-2020-28925 GHSA-w8cj-mvf9-mpc9

Affected package: bolt/bolt

Affected version: <3.7.2

Reported by:
GitHub