@auto-canary/all-contributors (>=8.4.1-canary.7be52c60.0 <=10.0.0-canary.998.13000.0), @auto-canary/auto (>=8.4.1-canary.7be52c60.0 <=10.0.0-canary.998.13000.0) +101 more potentially affected by CVE-2021-26541 via gitlog (>=0.0.1 <=4.0.3)

gitlog NPM version =0.0.1, =8.4.1-canary.7be52c60.0, =8.4.1-canary.7be52c60.0, =9.26.6-canary.1135.14740.0, =8.4.1-canary.7be52c60.0, =9.26.6-canary.1135.14740.0, =8.4.1-canary.7be52c60.0, =8.0.1-canary.791.10435.0, =8.4.1-canary.7be52c60.0, =9.26.6-canary.1135.14740.0, =8.4.1-canary.7be52c60.0,...

Command injection in gitlog

The gitlog function in src/index.ts in gitlog before 4.0.4 has a command injection vulnerability...