Lucene search

K
osvGoogleOSV:GHSA-WP3J-GV53-4PG8
HistoryMay 13, 2022 - 1:41 a.m.

fs-git command injection vulnerability

2022-05-1301:41:14
Google
osv.dev
5

0.0004 Low

EPSS

Percentile

12.7%

fs-git is a file system like api for git repository. The fs-git version 1.0.1 module relies on child_process.exec, however, the buildCommand method used to construct exec strings does not properly sanitize data and is vulnerable to command injection across all methods that use it and call exec.

CPENameOperatorVersion
fs-gitlt1.0.2

0.0004 Low

EPSS

Percentile

12.7%

Related for OSV:GHSA-WP3J-GV53-4PG8