VYPR
Medium severity5.3NVD Advisory· Published Oct 1, 2024· Updated Jun 17, 2026

CVE-2024-21531

CVE-2024-21531

Description

All versions of the package git-shallow-clone are vulnerable to Command injection due to missing sanitization or mitigation flags in the process variable of the gitShallowClone function.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

PackageAffected versionsPatched versions
git-shallow-clonenpm
<= 0.0.2

Affected products

1

Patches

Vulnerability mechanics

References

5

News mentions

0

No linked articles in our index yet.