OS Command Injection

Overview Affected versions of the async-git package allow OS Command Injection via shell metacharacters, as demonstrated by git.reset and git.tag. Recommendation Upgrade to version 1.13.2 or later. References - CVE - GitHub Advisory...

PT-2021-11549

Name of the Vulnerable Software and Affected Versions: async-git versions prior to 1.13.2 Description: The issue concerns Command Injection via shell meta-characters, specifically back-ticks. This can be exploited, for example, through the git.reset function with a malicious input like...

CVE-2021-3190

The async-git package before 1.13.2 for Node.js allows OS Command Injection via shell metacharacters, as demonstrated by git.reset and git.tag...

Command injection

The async-git package before 1.13.2 for Node.js allows OS Command Injection via shell metacharacters, as demonstrated by git.reset and git.tag...

CVE-2021-3190

The async-git package before 1.13.2 for Node.js allows OS Command Injection via shell metacharacters, as demonstrated by git.reset and git.tag...

CVE-2021-3190

The CVE-2021-3190 issue affects the Node.js package async-git prior to 1.13.2, where OS Command Injection via shell metacharacters (demonstrated by git.reset and git.tag) is possible. The vulnerability may enable remote code execution in vulnerable environments. A remediation is to upgrade async-...

PT-2021-19574

Name of the Vulnerable Software and Affected Versions: async-git versions prior to 1.13.2 Description: The issue allows OS Command Injection via shell metacharacters, as demonstrated by git.reset and git.tag. This may lead to remote code execution if a client of the library calls the vulnerable...

CVE-2021-3190: Improper Neutralization of Special Elements used in an OS Command

The async-git package before 1.13.2 for Node.js allows OS Command Injection via shell metacharacters, as demonstrated by git.reset and git.tag...