CVE-2021-26541

The gitlog function in src/index.ts in gitlog before 4.0.4 has a command injection vulnerability...

@auto-canary/all-contributors (>=8.4.1-canary.7be52c60.0 <=10.0.0-canary.998.13000.0), @auto-canary/auto (>=8.4.1-canary.7be52c60.0 <=10.0.0-canary.998.13000.0) +101 more potentially affected by CVE-2021-26541 via gitlog (>=0.0.1 <=4.0.3)

gitlog NPM version =0.0.1, =8.4.1-canary.7be52c60.0, =8.4.1-canary.7be52c60.0, =9.26.6-canary.1135.14740.0, =8.4.1-canary.7be52c60.0, =9.26.6-canary.1135.14740.0, =8.4.1-canary.7be52c60.0, =8.0.1-canary.791.10435.0, =8.4.1-canary.7be52c60.0, =9.26.6-canary.1135.14740.0, =8.4.1-canary.7be52c60.0,...

Command injection in gitlog

The gitlog function in src/index.ts in gitlog before 4.0.4 has a command injection vulnerability...

GHSA-67MM-M3WX-J7FR Command injection in gitlog

The gitlog function in src/index.ts in gitlog before 4.0.4 has a command injection vulnerability...

Command Injection

gitlog is vulnerable to command injection. The vulnerability exists through the value of branch where unsanitized inputs are sent to the execSync function...

CVE-2021-26541

The gitlog function in src/index.ts in gitlog before 4.0.4 has a command injection vulnerability...

Command injection

The gitlog function in src/index.ts in gitlog before 4.0.4 has a command injection vulnerability...

CVE-2021-26541

The gitlog function in src/index.ts in gitlog before 4.0.4 has a command injection vulnerability...

EUVD-2021-0771

The gitlog function in src/index.ts in gitlog before 4.0.4 has a command injection vulnerability...

CVE-2021-26541

CVE-2021-26541 : The issue lies in the gitlog library’s gitlog function (src/index.ts) where input leads to a command injection vulnerability in versions before 4.0.4. The vulnerability is corroborated across multiple connected documents (RH, GHSA, OSV, Veracode, NVD, CVE lists). Reported impact ...

Ron-checkmarx gitlog command injection vulnerability

Ron-checkmarx gitlog is a parser from the US-based Ron-checkmarx organization. It provides a Git log parser for Node.JS. A command injection vulnerability exists in gitlog version 4.0.4, which stems from the gitlog function in src/index not properly filtering special elements within it. An attack...