Skip to content
OpenAdvisories
High · 7.8 CVE-2017-1000451 EUVD-2022-5610GHSA-wp3j-gv53-4pg8

fs-git command injection vulnerability

Published Jan 2, 2018 · Updated Aug 5, 2024 · Assigned by mitre

Description

fs-git is a file system like api for git repository. The fs-git version 1.0.1 module relies on child_process.exec, however, the buildCommand method used to construct exec strings does not properly sanitize data and is vulnerable to command injection across all methods that use it and call exec.

Affected packages

EcosystemPackageAffectedFixedRecord
npm fs-git < 1.0.2 1.0.2 GHSA-wp3j-gv53-4pg8

References