Skip to content
OpenAdvisories

Vendor

danday74

1 known vulnerabilities.

Products

git-diff 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2026-110634 Public exploit

    git-diff before 2.0.7 OS Command Injection via gitDiff Input Strings

    git-diff before 2.0.7 contains an OS command injection vulnerability that allows attackers to execute shell commands by supplying crafted strings to the gitDiff API. Attackers who control a diffed document string can embed $(cmd) or backtick substitutions tha…

    danday74 git-diff git-diff npm