GHSA-53xj-v576-3ch2CriticalCVSS 9.8

OS Command Injection in giting

Published
April 13, 2021
Last Modified
September 13, 2023

🔗 CVE IDs covered (1)

CVE-2019-10802 →

📋 Description

giting version prior to 0.0.8 allows execution of arbritary commands. The first argument repo of function pull() is executed by the package without any validation.

🎯 Affected products1

  • npm/giting:<= 0.0.8

🔗 References (4)