Description
The gitlog function in src/index.ts in gitlog before 4.0.4 has a command injection vulnerability.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| npm | gitlog | < 4.0.4 | 4.0.4 | GHSA-67mm-m3wx-j7fr |
Critical · 9.8
CVE-2021-26541
EUVD-2021-0771GHSA-67mm-m3wx-j7fr
Command injection in gitlog
Published Feb 8, 2021 · Updated Aug 3, 2024 · Assigned by mitre