← All advisories

High severity7.8NVD Advisory· Published Mar 21, 2021· Updated Jun 17, 2026

CVE-2021-28954

CVE-2021-28954

Description

In Chris Walz bit before 1.0.5 on Windows, attackers can run arbitrary code via a .exe file in a crafted repository.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Bit Project/Bit
cpe:2.3:a:bit_project:bit:*:*:*:*:*:*:*:*
Range: <1.0.5
Chris Walz/bitllm-fuzzy2 versions
<1.0.5+ 1 more
- (no CPE)range: <1.0.5
- (no CPE)

Patches

Vulnerability mechanics

References

2

github.com/chriswalz/bit/releases/tag/v1.0.5nvdRelease NotesThird Party Advisory
vuln.ryotak.me/advisories/17nvdThird Party Advisory

News mentions

0

No linked articles in our index yet.