CVE-2022-24376
1 advisory.
npm/git-promise CVE-2022-24376: high 7.2
OS Command Injection in git-promise
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 1.0.0 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-chj3-f7xw-367m
- https://nvd.nist.gov/vuln/detail/CVE-2022-24376
- https://github.com/lirantal/git-promise/commit/030e4f993f3b65419d60f7f60e81e0a742b72e77
- https://gist.github.com/lirantal/9da1fceb32f5279eb76a5fc1cb9707dd
- https://github.com/piuccio/git-promise
- https://snyk.io/vuln/SNYK-JS-GITPROMISE-2434310
CVE-2022-24376 · published · modified · JSON