Git Commit Info

CVEs (1)

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	KEV	Published	Description
CVE-2023-26134	Git Commit Info Project Git Commit Info	Cri	0.57	9.8	0.04		Jun 28, 2023	Versions of the package git-commit-info before 2.0.2 are vulnerable to Command Injection such that the package-exported method gitCommitInfo () fails to sanitize its parameter commit, which later flows into a sensitive command execution API. As a result, attackers may inject…

CVE-2023-26134CriJun 28, 2023
Git Commit Info Project
Git Commit Info
risk 0.57cvss 9.8epss 0.04
Versions of the package git-commit-info before 2.0.2 are vulnerable to Command Injection such that the package-exported method gitCommitInfo () fails to sanitize its parameter commit, which later flows into a sensitive command execution API. As a result, attackers may inject…