Ggit vulnerabilities
We track 1 vulnerability in Ggit products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on October 8, 2024.
1vulnerabilities
0critical
1high
0exploited
7.3average CVSS score
Latest Ggit vulnerabilities
- 7.3 High severity
ggit: Improper Neutralization of Special Elements used in an OS Command
All versions of the package ggit are vulnerable to Command Injection via the fetchTags(branch) API, which allows user input to specify the branch to be fetched and then concatenates this string along with a git command which is then passed to the unsafe exec()