Lucene search
AnonymousNODEJS:1614HistoryFeb 22, 2021 - 6:30 p.m.
OS Command Injection
2021-02-2218:30:38
Anonymous
www.npmjs.com
45
0.021 Low
EPSS
Percentile
89.1%
Overview
Affected versions of the async-git package allow OS Command Injection via shell metacharacters, as demonstrated by git.reset and git.tag.
Recommendation
Upgrade to version 1.13.2 or later.
References
Related
cvelist
cvelist
CVE-2021-3190
2021-01-21 07:11:33
veracode
veracode
Command Injection
2021-01-27 07:56:09
osv
osv
OS Command Injection in async-git
2021-01-29 18:14:00
cve
cve
CVE-2021-3190
2021-01-26 18:16:28
prion
prion
Command injection
2021-01-26 18:16:00
github
github
OS Command Injection in async-git
2021-01-29 18:14:00
nvd
nvd
CVE-2021-3190
2021-01-26 18:16:28