title: Error message: Shelljs 0.8.3 and before are vulnerable to Command Injection
body: <p>I am getting this error on my github alerts after updating my project to angular 8.0.3.</p>
  
  <p>It is a vulnerability with no remediation.</p>
  
  <p>No patched version is available.</p>
  
  <pre><code>Shelljs 0.8.3 and before are vulnerable to Command Injection.
  Commands can be invoked from shell.exec(),
  those commands will include input from external sources,
  to be passed as arguments to system executables
  and allowing an attacker to inject arbitrary commands.
  </code></pre>
  
  <p>Does anybody have any information available on this?</p>