CVE-2024-21531

All versions of the package git-shallow-clone are vulnerable to Command injection due to missing sanitization or mitigation flags in the process variable of the gitShallowClone function...

CVE-2024-21531

CVE-2024-21531 affects all versions of the JavaScript package git-shallow-clone . The root cause is a lack of sanitization or mitigation flags in the process variable used by the internal function gitShallowClone , enabling command/argument injection . Several sources (GitHub advisories, Red Hat,...

CVE-2024-21531

All versions of the package git-shallow-clone are vulnerable to Command injection due to missing sanitization or mitigation flags in the process variable of the gitShallowClone function...