Skip to content
OpenAdvisories

Package · npm

git-diff

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Critical 9.8
    CVE-2026-110634

    git-diff before 2.0.7 OS Command Injection via gitDiff Input Strings

    git-diff before 2.0.7 contains an OS command injection vulnerability that allows attackers to execute shell commands by supplying crafted strings to the gitDiff API. Attackers who control a diffed document string can embed $(cmd) or backtick substitutions tha…

    danday74 git-diff git-diff npm