Description


All versions of the package git-shallow-clone are vulnerable to Command injection due to missing sanitization or mitigation flags in the process variable of the gitShallowClone function.

Related CPE's


Could not find any relations

Weaknesses



CWE-78

CVSS impact metrics


CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

5.3 · Medium

Information


Source identifier

[email protected]

Vulnerability status

Deferred

Published

2024-10-01T05:15:12.440Z

1 year ago

Last modified

2026-06-17T07:09:41.333Z

3 months ago