Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

CVE-2020-28490

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-6qpr-9mc5-7gch

Command Injection in async-git The package async-git before 1.13.2 are vulnerable to Command Injection via shell meta-characters (back-ticks). For example: `git.reset('atouch HACKEDb')`

gitlab/npm/async-git/CVE-2020-28490

Argument Injection or Modification The package async-git are vulnerable to Command Injection via shell meta-characters (back-ticks). For example, ``git.reset('a`touch HACKED`b')``