Skip to content
OpenAdvisories
Critical · 9.8 CVE-2018-3785 EUVD-2018-0401GHSA-h3c2-x77c-7pvr

Command Injection in git-dummy-commit

Published Aug 17, 2018 · Updated Aug 5, 2024 · Assigned by hackerone

Vendor: https://github.com/stevemao Product: git-dummy-commit Package: git-dummy-commit Ecosystem: npm

Description

A command injection in git-dummy-commit v1.3.0 allows os level commands to be executed due to an unescaped parameter.

Affected products

VendorProductAffectedFixed
https://github.com/stevemao git-dummy-commit Not fixed —

Affected packages

EcosystemPackageAffectedFixedRecord
npm git-dummy-commit <= 1.3.0 — GHSA-h3c2-x77c-7pvr

References