High severity7.3GHSA Advisory· Published Oct 8, 2024· Updated Jun 17, 2026
CVE-2024-21532
CVE-2024-21532
Description
All versions of the package ggit are vulnerable to Command Injection via the fetchTags(branch) API, which allows user input to specify the branch to be fetched and then concatenates this string along with a git command which is then passed to the unsafe exec() Node.js child process API.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
ggitnpm | <= 2.4.12 | — |
Affected products
2Patches
Vulnerability mechanics
References
5News mentions
0No linked articles in our index yet.