Lucene search
Veracode Vulnerability DatabaseVERACODE:29077HistoryJan 21, 2021 - 6:59 a.m.
Command Injection
2021-01-2106:59:20
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
5
command injection
git-loader
vulnerability
shell spawning
EPSS
0.003
Percentile
68.7%
@graphql-tools/git-loader is vulnerable to command injection. The vulnerability exist due to the usage of exec and execSync which allows the spawning of a shell.
Related
osv
osv
Command Injection in @graphql-tools/git-loader
2021-01-29 18:13:14
CVE-2021-23326
2021-01-20 13:15:12
redhatcve
redhatcve
CVE-2021-23326
2021-02-04 16:22:44
nodejs
nodejs
Command Injection
2021-02-22 17:42:01
github
github
Command Injection in @graphql-tools/git-loader
2021-01-29 18:13:14
cve
cve
CVE-2021-23326
2021-01-20 13:15:12
nvd
nvd
CVE-2021-23326
2021-01-20 13:15:12
prion
prion
Command injection
2021-01-20 13:15:00
cvelist
cvelist
CVE-2021-23326 Command Injection
2021-01-20 12:30:15