EPSS
Percentile
97.0%
All versions of package gitlogplus are vulnerable to Command Injection via the main functionality, as options attributes are appended to the command to be executed without sanitization.
hackerone.com/reports/808942
nvd.nist.gov/vuln/detail/CVE-2021-23412
snyk.io/vuln/SNYK-JS-GITLOGPLUS-1315832
www.npmjs.com/package/gitlogplus