GHSA-84cm-v6jp-gjmrCriticalCVSS 9.8

OS command injection in git-diff-apply

Published
February 14, 2020
Last Modified
January 9, 2023

🔗 CVE IDs covered (1)

CVE-2019-10776 →

📋 Description

In "index.js" file line 240, the run command executes the git command with a user controlled variable called remoteUrl. This affects git-diff-apply all versions prior to 0.22.2.

🎯 Affected products1

  • npm/git-diff-apply:<= 0.22.1

🔗 References (5)