Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

1 record

Vendor: Git-commit-info Project Component: Git-commit-info Clear all filters
TI-2023-11358 CVE-2023-26134 · GHSA-h42j-mrmp-9369

OS command injection in git-commit-info

Priority HIGH 82

Versions of the package git-commit-info before 2.0.2 are vulnerable to Command Injection such that the package-exported method gitCommitInfo () fails to sanitize its parameter commit, which later flows into a sensitive c…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03638 Published 2023-06-28 Fixed in 2.0.2 CWE-78