CVE-2021-23412

CVE-2021-23412 affects the Node.js package gitlogplus . The root cause is that the library appends user-controlled options to shell commands without sanitization, enabling a command injection vulnerability. This can be triggered remotely over the network without authentication, with impact on con...