Remote Command Execution in reg-keygen-git-hash-plugin

Impact reg-keygen-git-hash-plugin through 0.10.15 allow remote attackers to execute of arbitrary commands. Patches Upgrade to version 0.10.16 or later. For more information If you have any questions or comments about this advisory: - Open an issue in reg-viz/reg-suit...

@netsells/reg-suit-basic-git-hash-plugin (>=0.2.0, <=0.2.1), reg-notify-github-plugin (>=0.0.18, <=0.4.2) potentially affected by CVE-2021-32673 via reg-keygen-git-hash-plugin (>=0.0.17, <=0.8.5)

reg-keygen-git-hash-plugin NPM version =0.0.17, =0.2.0, =0.0.18, =0.4.2 Source cves: CVE-2021-32673 Source advisory: GHSA-49Q3-8867-5WMP...

@netsells/reg-suit-basic-git-hash-plugin (>=0.2.0, <=0.2.1), reg-notify-github-plugin (>=0.0.18, <=0.4.2) potentially affected by CVE-2021-32673 via reg-keygen-git-hash-plugin (>=0.0.17, <=0.8.5)

reg-keygen-git-hash-plugin NPM version =0.0.17, =0.2.0, =0.0.18, =0.4.2 Source cves: CVE-2021-32673 Source advisory: OSV:GHSA-49Q3-8867-5WMP...

CVE-2021-32673

reg-keygen-git-hash-plugin is a reg-suit plugin to detect the snapshot key to be compare with using Git commit hash. reg-keygen-git-hash-plugin through and including 0.10.15 allow remote attackers to execute of arbitrary commands. Upgrade to version 0.10.16 or later to resolve this issue...

Design/Logic Flaw

reg-keygen-git-hash-plugin is a reg-suit plugin to detect the snapshot key to be compare with using Git commit hash. reg-keygen-git-hash-plugin through and including 0.10.15 allow remote attackers to execute of arbitrary commands. Upgrade to version 0.10.16 or later to resolve this issue...

CVE-2021-32673 Remote Command Execution in reg-keygen-git-hash-plugin

reg-keygen-git-hash-plugin is a reg-suit plugin to detect the snapshot key to be compare with using Git commit hash. reg-keygen-git-hash-plugin through and including 0.10.15 allow remote attackers to execute of arbitrary commands. Upgrade to version 0.10.16 or later to resolve this issue...

@netsells/reg-suit-basic-git-hash-plugin (>=0.2.0, <=0.2.1), reg-notify-github-plugin (>=0.0.18, <=0.4.2) potentially affected by CVE-2021-32673 via reg-keygen-git-hash-plugin (>=0.0.17, <=0.8.5)

reg-keygen-git-hash-plugin NPM version =0.0.17, =0.2.0, =0.0.18, =0.4.2 Source cves: CVE-2021-32673 Source advisory: MEND:CVE-2021-32673...

CVE-2021-32673: Improper Control of Generation of Code

reg-keygen-git-hash-plugin is a reg-suit plugin to detect the snapshot key to be compare with using Git commit hash. reg-keygen-git-hash-plugin through and including 0.10.15 allow remote attackers to execute of arbitrary commands. Upgrade to version 0.10.16 or later to resolve this issue...

reg-suit Operating System Command Injection Vulnerability

Reg-viz reg-suit is an open source command line interface for reg-viz. Reg-viz reg-suit suffers from a code injection vulnerability that can be exploited by an attacker to execute arbitrary commands...