npm/ggit CVE-2024-21532: high 7.3, EPSS 1.29%
ggit is vulnerable to Command Injection via the fetchTags(branch) API
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 2.4.12 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-62cx-5xj4-wfm4
- https://nvd.nist.gov/vuln/detail/CVE-2024-21532
- https://gist.github.com/lirantal/d8f87b366d2078e6118ab7bf2b005f02
- https://github.com/bahmutov/ggit
- https://security.snyk.io/vuln/SNYK-JS-GGIT-5731320
CVE-2024-21532 · published · modified · JSON