GHSA-m744-2jj8-vpfvHighCVSS 8.8

Command injection in git-parse

Published
February 10, 2022
Last Modified
January 27, 2023

🔗 CVE IDs covered (1)

CVE-2021-26543 →

📋 Description

The "gitDiff" function in Wayfair git-parse <=1.0.4 has a command injection vulnerability. Clients of the git-parse library are unlikely to be aware of this, so they might unwittingly write code that contains a vulnerability.

🎯 Affected products1

  • npm/git-parse:< 1.0.5

🔗 References (4)