21 matches found
@apsis/cli (0.5.0), @asmallstudio/utilities (>=0.2.2, <=0.3.3) +69 more potentially affected by unknown CVE via git-promise (>=0.2.0, <=0.3.1)
git-promise NPM version =0.2.0, =0.2.2, =1.1.8, =7.2.3-beta.3, =7.0.0, =1.0.0, =5.9.2, =1.1.1, =1.0.4, =0.1.0, =0.1.0, =0.3.1 - bilberry 0.3.0 and more Source cves: unknown CVE Source advisory: MEND:WS-2019-0600...
WS-2019-0600
In git-promise in versions 0.1.0 to 0.3.1 is vulnerable to Remote Code Execution RCE...
EUVD-2022-6025
Malicious code in bioql PyPI...
Command Injection
git-promise is vulnerable to command injection. The vulnerability exists in index.js due to an inappropriate fix for another vulnerability which allows an attacker to inject and execute arbitrary commands...
OS Command Injection in git-promise
All versions of package git-promise is vulnerable to Command Injection due to an inappropriate fix of a prior vulnerability in this package. Note: Please note that the vulnerability will not be fixed. The README file was updated with a warning regarding this issue. Credits @lirantal for discoveri...
GHSA-CHJ3-F7XW-367M OS Command Injection in git-promise
All versions of package git-promise is vulnerable to Command Injection due to an inappropriate fix of a prior vulnerability in this package. Note: Please note that the vulnerability will not be fixed. The README file was updated with a warning regarding this issue. Credits @lirantal for discoveri...
@efox/efoxcli (>=1.0.0, <=1.0.3), @efox/emp (>=2.0.0-beta.10, <=3.0.0-alpha.1) +53 more potentially affected by CVE-2022-24376 via git-promise (1.0.0)
git-promise NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on git-promise and may be impacted: - @efox/efoxcli =1.0.0, =2.0.0-beta.10, =1.0.13, =1.0.0, =0.0.8, =1.0.0, =1.0.0, =0.0.4, =1.0.1, =1.6.0 and more Source cves: CVE-2022-24376...
@efox/efoxcli (>=1.0.0, <=1.0.3), @efox/emp (>=2.0.0-beta.10, <=3.0.0-alpha.1) +53 more potentially affected by CVE-2022-24376 via git-promise (1.0.0)
git-promise NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on git-promise and may be impacted: - @efox/efoxcli =1.0.0, =2.0.0-beta.10, =1.0.13, =1.0.0, =0.0.8, =1.0.0, =1.0.0, =0.0.4, =1.0.1, =1.6.0 and more Source cves: CVE-2022-24376...
CVE-2022-24376
All versions of package git-promise are vulnerable to Command Injection due to an inappropriate fix of a prior vulnerability in this package. Note: Please note that the vulnerability will not be fixed. The README file was updated with a warning regarding this issue...
Command injection
All versions of package git-promise are vulnerable to Command Injection due to an inappropriate fix of a prior vulnerability in this package. Note: Please note that the vulnerability will not be fixed. The README file was updated with a warning regarding this issue...
CVE-2022-24376
All versions of package git-promise are vulnerable to Command Injection due to an inappropriate fix of a prior "vulnerability" https://security.snyk.io/vuln/SNYK-JS-GITPROMISE-567476 in this package. Note: Please note that the vulnerability will not be fixed. The README file was updated with a...
CVE-2022-24376
CVE-2022-24376 (git-promise) is a command-injection vulnerability affecting all versions of the package due to an inappropriate fix of a prior issue. The available documents consistently state that there is no fixed version and that the README contains a warning about this vulnerability. The prac...
CVE-2022-24376 Command Injection
All versions of package git-promise are vulnerable to Command Injection due to an inappropriate fix of a prior vulnerability in this package. Note: Please note that the vulnerability will not be fixed. The README file was updated with a warning regarding this issue...
CVE-2022-24376
All versions of package git-promise are vulnerable to Command Injection due to an inappropriate fix of a prior vulnerability in this package. Note: Please note that the vulnerability will not be fixed. The README file was updated with a warning regarding this issue...
git-promise parameter injection vulnerability
git-promise is a simple wrapper. Run any git command with a more intuitive syntax. A parameter injection vulnerability exists in all versions of git-promise due to the use of space-splitting in the logic used to separate command parameters in pull requests...
CVE-2022-24376: Improper Neutralization of Argument Delimiters in a Command
All versions of package git-promise are vulnerable to Command Injection due to an inappropriate fix of a prior vulnerability in this package. Note: Please note that the vulnerability will not be fixed. The README file was updated with a warning regarding this issue...
PT-2022-16654 · Unknown · Git-Promise
Name of the Vulnerable Software and Affected Versions: git-promise versions all Description: The issue is related to Command Injection due to an inappropriate fix of a prior vulnerability in the git-promise package. The README file was updated with a warning regarding this issue. It is noted that...
@apsis/cli (0.5.0), @asmallstudio/utilities (>=0.2.2, <=0.3.3) +121 more potentially affected by CVE-2022-24376 via git-promise (>=0.2.0, <=1.0.0)
git-promise NPM version =0.2.0, =0.2.2, =1.1.8, =1.0.0, =2.0.0-beta.10, =1.0.13, =1.0.0, =0.0.8, =1.1.1 - @efox/eslint-config-react-prittier-ts 1.0.19 - @efox/pay 1.0.8 - @efox/plugin-babel-react 1.0.1 - @emfc/emfc-cli 1.1.0 and more Source cves: CVE-2022-24376 Source advisory:...
Command Injection
Overview git-promise is a Simple wrapper that allows you to run any git command using a more intuitive syntax. Affected versions of this package are vulnerable to Command Injection due to an inappropriate fix of a prior vulnerability in this package. Note: Please note that the vulnerability will...