What is GHSA-49q3-8867-5wmp?

GHSA-49q3-8867-5wmp is a security advisory published by GitHub Security Advisories with High severity. Remote Command Execution in reg-keygen-git-hash-plugin

Which CVE IDs does GHSA-49q3-8867-5wmp cover?

GHSA-49q3-8867-5wmp covers the following CVE IDs: CVE-2021-32673. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-49q3-8867-5wmp?

GHSA-49q3-8867-5wmp has a CVSS v3 base score of 8.8, published by GitHub Security Advisories.

Which products are affected by GHSA-49q3-8867-5wmp?

GHSA-49q3-8867-5wmp affects 1 product, including: npm/reg-keygen-git-hash-plugin:\u003c 0.10.16.

GHSA-49q3-8867-5wmpHighCVSS 8.8

Remote Command Execution in reg-keygen-git-hash-plugin

Vendor

GitHub Security Advisories

Published

June 8, 2021

Last Modified

February 1, 2023

🔗 CVE IDs covered (1)

CVE-2021-32673 →

📋 Description

Impact

reg-keygen-git-hash-plugin through 0.10.15 allow remote attackers to execute of arbitrary commands.

Patches

Upgrade to version 0.10.16 or later.

For more information

If you have any questions or comments about this advisory:

Open an issue in reg-viz/reg-suit

🎯 Affected products1

npm/reg-keygen-git-hash-plugin:< 0.10.16

🔗 References (6)

https://github.com/reg-viz/reg-suit/security/advisories/GHSA-49q3-8867-5wmp
https://nvd.nist.gov/vuln/detail/CVE-2021-32673
https://github.com/reg-viz/reg-suit/commit/f84ad9c7a22144d6c147dc175c52756c0f444d87
https://github.com/reg-viz/reg-suit/releases/tag/v0.10.16
https://www.npmjs.com/package/reg-keygen-git-hash-plugin
https://github.com/advisories/GHSA-49q3-8867-5wmp