17 matches found
CVE-2021-26541
The gitlog function in src/index.ts in gitlog before 4.0.4 has a command injection vulnerability...
applets-helper (>=1.0.1, <=1.0.5), git-metric (0.1.7) +1 more potentially affected by CVE-2021-26541 via gitlog (4.0.3)
gitlog NPM version 4.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on gitlog and may be impacted: - applets-helper =1.0.1, =1.0.2, =1.0.5 Source cves: CVE-2021-26541 Source advisory: GHSA-67MM-M3WX-J7FR...
GHSA-67MM-M3WX-J7FR Command injection in gitlog
The gitlog function in src/index.ts in gitlog before 4.0.4 has a command injection vulnerability...
Command injection in gitlog
The gitlog function in src/index.ts in gitlog before 4.0.4 has a command injection vulnerability...
applets-helper (>=1.0.1, <=1.0.5), git-metric (0.1.7) +1 more potentially affected by CVE-2021-26541 via gitlog (4.0.3)
gitlog NPM version 4.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on gitlog and may be impacted: - applets-helper =1.0.1, =1.0.2, =1.0.5 Source cves: CVE-2021-26541 Source advisory: OSV:GHSA-67MM-M3WX-J7FR...
Command Injection
gitlog is vulnerable to command injection. The vulnerability exists through the value of branch where unsanitized inputs are sent to the execSync function...
CVE-2021-26541
The gitlog function in src/index.ts in gitlog before 4.0.4 has a command injection vulnerability...
Command injection
The gitlog function in src/index.ts in gitlog before 4.0.4 has a command injection vulnerability...
CVE-2021-26541
The gitlog function in src/index.ts in gitlog before 4.0.4 has a command injection vulnerability...
@auto-canary/all-contributors (>=8.4.1-canary.812.10736.0, <=10.0.0-canary.998.13000.0), @auto-canary/auto (>=8.4.1-canary.812.10736.0, <=10.0.0-canary.998.13000.0) +101 more potentially affected by CVE-2021-26541 via gitlog (>=0.0.1, <=4.0.3)
gitlog NPM version =0.0.1, =8.4.1-canary.812.10736.0, =8.4.1-canary.812.10736.0, =9.26.6-canary.1135.14740.0, =8.4.1-canary.812.10736.0, =9.26.6-canary.1135.14740.0, =8.4.1-canary.812.10736.0, =8.0.1-canary.791.10435.0, =8.4.1-canary.812.10736.0, =9.26.6-canary.1135.14740.0,...
CVE-2021-26541
The gitlog function in src/index.ts in gitlog before 4.0.4 has a command injection vulnerability...
EUVD-2021-0771
The gitlog function in src/index.ts in gitlog before 4.0.4 has a command injection vulnerability...
CVE-2021-26541
The gitlog function in src/index.ts in gitlog before 4.0.4 has a command injection vulnerability...
CVE-2021-26541
CVE-2021-26541 : The issue lies in the gitlog library’s gitlog function (src/index.ts) where input leads to a command injection vulnerability in versions before 4.0.4. The vulnerability is corroborated across multiple connected documents (RH, GHSA, OSV, Veracode, NVD, CVE lists). Reported impact ...
PT-2021-17028
Name of the Vulnerable Software and Affected Versions gitlog versions prior to 4.0.4 Description The issue is related to a command injection vulnerability in the gitlog function, located in src/index.ts. This vulnerability can be exploited due to insufficient input validation, allowing an attacke...
CVE-2021-26541: Improper Neutralization of Special Elements used in an OS Command
The gitlog function in src/index.ts in gitlog before 4.0.4 has a command injection vulnerability...
Ron-checkmarx gitlog command injection vulnerability
Ron-checkmarx gitlog is a parser from the US-based Ron-checkmarx organization. It provides a Git log parser for Node.JS. A command injection vulnerability exists in gitlog version 4.0.4, which stems from the gitlog function in src/index not properly filtering special elements within it. An attack...