CyberSecBulletin

Degit vulnerabilities

We track 1 vulnerability in Degit products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on June 9, 2026.

1vulnerabilities
0critical
1high
0exploited
8.8average CVSS score

Latest Degit vulnerabilities

  • 8.8 High severity

    degit: Improper Neutralization of Special Elements used in an OS Command

    CVE-2026-11572DegitEPSS 1.04%

    Versions of the package degit before 2.8.6, from 3.0.0 and before 3.3.1 are vulnerable to Command Injection due to improper sanitisation of user input for git shell commands directly invoked with exec() method by _cloneWithGit() and fetchRefs() functions. An a