Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

CVE-2017-1000451

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-wp3j-gv53-4pg8

fs-git command injection vulnerability fs-git is a file system like api for git repository. The fs-git version 1.0.1 module relies on child_process.exec, however, the buildCommand method used to construct exec strings does not properly sanitize data and is vulnerable to command injection across all methods that use it and call exec.

gitlab/npm/fs-git/CVE-2017-1000451

Code Injection fs-git is an API for git that relies on `child_process.exec`. The `buildCommand` method used to construct `exec` strings does not properly sanitize data and is vulnerable to command injection across all methods that use it and call `exec`.