git-shallow-clone OS Command Injection vulnerability
Moderate severity
GitHub Reviewed
Published
Oct 1, 2024
to the GitHub Advisory Database
•
Updated Oct 1, 2024
Description
Published by the National Vulnerability Database
Oct 1, 2024
Published to the GitHub Advisory Database
Oct 1, 2024
Reviewed
Oct 1, 2024
Last updated
Oct 1, 2024
All versions of the package git-shallow-clone are vulnerable to Command injection due to missing sanitization or mitigation flags in the process variable of the gitShallowClone function.
References