CVE-2020-7619

get-git-data through 1.3.1 is vulnerable to Command Injection. It is possible to inject arbitrary commands as part of the arguments provided to get-git-data...

EUVD-2021-1220

Malware in sbrugna...

GHSA-WJ6H-7CHW-X4H2 Command injection in get-git-data

get-git-data through 1.3.1 is vulnerable to Command Injection. It is possible to inject arbitrary commands as part of the arguments provided to get-git-data...

Command injection in get-git-data

get-git-data through 1.3.1 is vulnerable to Command Injection. It is possible to inject arbitrary commands as part of the arguments provided to get-git-data...

sizemometer (>=0.0.3, <=0.8.1) potentially affected by CVE-2020-7619 via get-git-data (>=1.0.3, <=1.3.1)

get-git-data NPM version =1.0.3, =0.0.3, =0.8.1 Source cves: CVE-2020-7619 Source advisory: OSV:GHSA-WJ6H-7CHW-X4H2...

sizemometer (>=0.0.3, <=0.8.1) potentially affected by CVE-2020-7619 via get-git-data (>=1.0.3, <=1.3.1)

get-git-data NPM version =1.0.3, =0.0.3, =0.8.1 Source cves: CVE-2020-7619 Source advisory: GHSA-WJ6H-7CHW-X4H2...

OS Command Injection

get-git-data is vulnerable to OS command injection. The vulnerability exists as the values of cmd is not sanitized...

get-git-data injection vulnerability

get-git-data is a package for accessing Git version information. An injection vulnerability exists in get-git-data 1.3.1 and earlier versions, which stems from a lack of proper validation of user input data. A remote attacker can exploit this vulnerability by sending specially crafted parameters ...

CVE-2020-7619

get-git-data through 1.3.1 is vulnerable to Command Injection. It is possible to inject arbitrary commands as part of the arguments provided to get-git-data...

CVE-2020-7619

get-git-data through 1.3.1 is vulnerable to Command Injection. It is possible to inject arbitrary commands as part of the arguments provided to get-git-data...

CVE-2020-7619

get-git-data through 1.3.1 is vulnerable to Command Injection. It is possible to inject arbitrary commands as part of the arguments provided to get-git-data...

CVE-2020-7619

get-git-data through 1.3.1 is vulnerable to Command Injection. It is possible to inject arbitrary commands as part of the arguments provided to get-git-data...

CVE-2020-7619

CVE-2020-7619 affects the Node.js package get-git-data up to version 1.3.1. The issue is a Command Injection vulnerability: user-supplied arguments to get-git-data can lead to arbitrary command execution. Multiple connected sources confirm the vulnerability and link it to the lack of input valida...

sizemometer (>=0.3.0, <=0.8.1) potentially affected by CVE-2020-7619 via get-git-data (>=1.3.0, <=1.3.1)

get-git-data NPM version =1.3.0, =0.3.0, =0.8.1 Source cves: CVE-2020-7619 Source advisory: SNYK:JS-GETGITDATA-564222...

PT-2020-19657

Name of the Vulnerable Software and Affected Versions get-git-data versions prior to 1.3.2 Description The issue allows for Command Injection, where an attacker can inject arbitrary commands as part of the arguments provided to get-git-data. Recommendations For versions prior to 1.3.2, update to...

CVE-2020-7619: Improper Neutralization of Special Elements used in an OS Command

get-git-data through 1.3.1 is vulnerable to Command Injection. It is possible to inject arbitrary commands as part of the arguments provided to get-git-data...