4 matches found
CVE-2021-44684
naholyr github-todos 3.1.0 is vulnerable to command injection. The range argument for the hook subcommand is concatenated without any validation, and is directly used by the exec function...
CVE-2021-44684
naholyr github-todos 3.1.0 is vulnerable to command injection. The range argument for the hook subcommand is concatenated without any validation, and is directly used by the exec function...
CVE-2021-44684: Improper Neutralization of Special Elements used in an OS Command
naholyr github-todos 3.1.0 is vulnerable to command injection. The range argument for the hook subcommand is concatenated without any validation, and is directly used by the exec function...
PT-2021-24152
Name of the Vulnerable Software and Affected Versions: naholyr github-todos version 3.1.0 Description: The issue concerns a command injection vulnerability. Specifically, the range argument for the hook subcommand is concatenated without validation and directly used by the exec function. This lac...