Pull It Project

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Pull It Project records in CISA KEV

No Pull It Project vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record in Pull It · all components

TI-2018-15310 CVE-2018-25083 · GHSA-8px5-63x9-5c7p

HIGH 82

The pullit package before 1.4.0 for Node.js allows OS Command Injection because eval is used on an attacker-supplied Git branch name.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02693 Published 2023-03-27 Fixed in 1.4.0 CWE-78