Skip to content
OpenAdvisories

Package · npm

giting

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Critical —
    GHSA-7r9x-hr76-jr96

    Command Injection in giting

    All versions of `gitting` are vulnerable to Command Injection. The package fails to sanitize input and passes it directly to an `exec` call, which may allow attackers to execute arbitrary code in the system. The `pull` function is vulnerable through the `bran…

    giting npm
  • Critical 9.8
    CVE-2019-10802

    OS Command Injection in giting

    giting version prior to 0.0.8 allows execution of arbritary commands. The first argument "repo" of function "pull()" is executed by the package without any validation.

    giting npm