geojson2kml@0.1.1 vulnerabilities

a module for converting a geojson file to a kml file

Known vulnerabilities in the geojson2kml package. This does not include vulnerabilities belonging to this package’s dependencies.

Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.

Vulnerability	Vulnerable Version
C Command Injection geojson2kml is a node.js module for converting geojson to kml Affected versions of this package are vulnerable to Command Injection via the `index.js` file. PoC: `var a =require("geojson2kml"); a("./","& touch JHU",function(){})` How to fix Command Injection? There is no fixed version for `geojson2kml`.	*