Read the docs

Git-commit-info Project

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Git-commit-info Project records in CISA KEV

No Git-commit-info Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Git-commit-info 1 record HIGH

Records

1 record in Git-commit-info · all components

TI-2023-11358 CVE-2023-26134 · GHSA-h42j-mrmp-9369

OS command injection in git-commit-info

Priority HIGH 82

Versions of the package git-commit-info before 2.0.2 are vulnerable to Command Injection such that the package-exported method gitCommitInfo () fails to sanitize its parameter commit, which later flows into a sensitive c…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03638 Published 2023-06-28 Fixed in 2.0.2 CWE-78
Open these records in search →