Git-commit-info vulnerabilities
We track 1 vulnerability in Git-commit-info products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on June 28, 2023.
1vulnerabilities
1critical
0high
0exploited
9.8average CVSS score
Latest Git-commit-info vulnerabilities
- 9.8 Critical severity
git-commit-info: Improper Neutralization of Special Elements used in a Command
Versions of the package git-commit-info before 2.0.2 are vulnerable to Command Injection such that the package-exported method gitCommitInfo () fails to sanitize its parameter commit, which later flows into a sensitive command execution API. As a result, attac