Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

CVE-2021-23326

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-vhhw-xjvf-wprr

Command Injection in @graphql-tools/git-loader This affects the package @graphql-tools/git-loader before 6.2.6. The use of exec and execSync in packages/loaders/git/src/load-git.ts allows arbitrary command injection.

gitlab/npm/graphql-tools/CVE-2021-23326

Command Injection The use of exec and `execSync` in `packages/loaders/git/src/load-git.ts` allows arbitrary command injection.

gitlab/npm/@graphql-tools/git-loader/CVE-2021-23326

Improper Neutralization of Special Elements used in a Command ('Command Injection') This affects the package @graphql-tools/git-loader The use of exec and execSync in packages/loaders/git/src/load-git.ts allows arbitrary command injection.