CVE-2021-26541

The gitlog function in src/index.ts in gitlog before 4.0.4 has a command injection vulnerability...

Command injection in gitlog

The gitlog function in src/index.ts in gitlog before 4.0.4 has a command injection vulnerability...

applets-helper (>=1.0.1, <=1.0.5), git-metric (0.1.7) +1 more potentially affected by CVE-2021-26541 via gitlog (4.0.3)

gitlog NPM version 4.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on gitlog and may be impacted: - applets-helper =1.0.1, =1.0.2, =1.0.5 Source cves: CVE-2021-26541 Source advisory: OSV:GHSA-67MM-M3WX-J7FR...

GHSA-67MM-M3WX-J7FR Command injection in gitlog

The gitlog function in src/index.ts in gitlog before 4.0.4 has a command injection vulnerability...

Command Injection

gitlog is vulnerable to command injection. The vulnerability exists through the value of branch where unsanitized inputs are sent to the execSync function...

CVE-2021-26541

The gitlog function in src/index.ts in gitlog before 4.0.4 has a command injection vulnerability...

CVE-2021-26541

The gitlog function in src/index.ts in gitlog before 4.0.4 has a command injection vulnerability...

Command injection

The gitlog function in src/index.ts in gitlog before 4.0.4 has a command injection vulnerability...

CVE-2021-26541

CVE-2021-26541 : The issue lies in the gitlog library’s gitlog function (src/index.ts) where input leads to a command injection vulnerability in versions before 4.0.4. The vulnerability is corroborated across multiple connected documents (RH, GHSA, OSV, Veracode, NVD, CVE lists). Reported impact ...

CVE-2021-26541

The gitlog function in src/index.ts in gitlog before 4.0.4 has a command injection vulnerability...

EUVD-2021-0771

The gitlog function in src/index.ts in gitlog before 4.0.4 has a command injection vulnerability...

Ron-checkmarx gitlog command injection vulnerability

Ron-checkmarx gitlog is a parser from the US-based Ron-checkmarx organization. It provides a Git log parser for Node.JS. A command injection vulnerability exists in gitlog version 4.0.4, which stems from the gitlog function in src/index not properly filtering special elements within it. An attack...