← All advisories

Critical severity9.8NVD Advisory· Published Aug 17, 2018· Updated Jun 17, 2026

CVE-2018-3785

CVE-2018-3785

Description

A command injection in git-dummy-commit v1.3.0 allows os level commands to be executed due to an unescaped parameter.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
git-dummy-commitnpm	<= 1.3.0	—

Affected products

3

Git Dummy Commit Project/Git Dummy Commit
cpe:2.3:a:git-dummy-commit_project:git-dummy-commit:1.3.0:*:*:*:*:node.js:*:*
ghsa-coords
pkg:npm/git-dummy-commit
Range: <= 1.3.0
https://github.com/stevemao/git-dummy-commitv5
Range: Not fixed

Patches

Vulnerability mechanics

References

3

hackerone.com/reports/341710nvdExploitPatchThird Party AdvisoryWEB
github.com/advisories/GHSA-h3c2-x77c-7pvrghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2018-3785ghsaADVISORY

News mentions

0

No linked articles in our index yet.