← All advisories

Critical severityNVD Advisory· Published Feb 8, 2021· Updated Aug 3, 2024

CVE-2021-26541

CVE-2021-26541

Description

The gitlog function in src/index.ts in gitlog before 4.0.4 has a command injection vulnerability.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
gitlognpm	< 4.0.4	4.0.4

Affected products

2

gitlog/gitlogdescription
ghsa-coords
pkg:npm/gitlog
Range: < 4.0.4

Patches

Vulnerability mechanics

References

6

github.com/advisories/GHSA-67mm-m3wx-j7frghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2021-26541ghsaADVISORY
advisory.checkmarx.net/advisory/CX-2020-4301ghsax_refsource_MISCWEB
github.com/domharrington/node-gitlog/pull/65ghsax_refsource_MISCWEB
github.com/domharrington/node-gitlog/pull/65/commits/bb22ffb2c907e0284f887ab625e12b88c31f4bf4ghsaWEB
www.npmjs.com/package/gitlogghsax_refsource_MISCWEB

News mentions

0

No linked articles in our index yet.