CVE-2022-24376

creationtimestamp| type| source ---|---|--- 2022-06-11 00:34:53+00:00| seen| https://t.me/cibsecurity/44224...

CVE-2022-24376

CVE-2022-24376 (git-promise) is a command-injection vulnerability affecting all versions of the package due to an inappropriate fix of a prior issue. The available documents consistently state that there is no fixed version and that the README contains a warning about this vulnerability. The prac...

CVE-2022-24376 Command Injection

All versions of package git-promise are vulnerable to Command Injection due to an inappropriate fix of a prior vulnerability in this package. Note: Please note that the vulnerability will not be fixed. The README file was updated with a warning regarding this issue...