~ / search / GHSA-9v73-x562-wv5x

GHSA-9v73-x562-wv5x

OS Command Injection in gitsome

Source: GitHub Advisory Database (reviewed) High CVE-2021-34081

Packages

EcosystemPackageAffectedFixed in
npm gitsome <= 0.2.3 no fix listed

Details

As written in the advisory (Markdown source, shown as plain text).

OS Command Injection vulnerability in bbultman gitsome through 0.2.3 allows attackers to execute arbitrary commands via a crafted tag name of the target git repository.

References

External links from the advisory. They lead to third-party sites.