GitHub Advisoryadvisory · npm
GHSA-vjfr-p6hp-jqqw Command Injection in ungit
CRITICAL
Official page ↗
- Aliases
- CVE-2015-4130
- Ecosystem
- npm
- Packages
- ungit
- Severity
- Critical
- Weaknesses
- CWE-77
- Reviewed
- 2020-08-31
Affected packages
• npm ungit: < 0.9.0 → fixed in 0.9.0
Description
Versions of `ungit` prior to 0.9.0 are affected by a command injection vulnerability in the `url` parameter.
Recommendation
Update version 0.9.0 or later.
Related
Alias · not in database (1)
Weakness · CWE (1)
- CWE-77 Improper Neutralization of Special Elements used in a Command weakness