Lucene search

K
osvGoogleOSV:GHSA-84CM-V6JP-GJMR
HistoryFeb 14, 2020 - 11:09 p.m.

OS command injection in git-diff-apply

2020-02-1423:09:24
Google
osv.dev
8

0.006 Low

EPSS

Percentile

77.7%

In “index.js” file line 240, the run command executes the git command with a user controlled variable called remoteUrl. This affects git-diff-apply all versions prior to 0.22.2.

CPENameOperatorVersion
git-diff-applylt0.22.2

0.006 Low

EPSS

Percentile

77.7%