CVE-2022-25900
1 advisory.
npm/git-clone CVE-2022-25900: high 8.1, EPSS 3.51%
Command injection in git-clone
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 0.2.0 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-8jmw-wjr8-2x66
- https://nvd.nist.gov/vuln/detail/CVE-2022-25900
- https://github.com/jaz303/git-clone/commit/fd330459593aef7c7a8c54d786e3c4d5722749f9
- https://gist.github.com/lirantal/9441f3a1212728476f7a6caa4acb2ccc
- https://github.com/jaz303/git-clone
- https://snyk.io/vuln/SNYK-JS-GITCLONE-2434308
CVE-2022-25900 · published · modified · JSON