high8.8
CVE-2021-32673
Remote Command Execution in reg-keygen-git-hash-plugin
Impact
### Impact `reg-keygen-git-hash-plugin` through 0.10.15 allow remote attackers to execute of arbitrary commands. ### Patches Upgrade to version 0.10.16 or later. ### For more information If you have any questions or comments about this advisory: - Open an issue in [reg-viz/reg-suit](https://github.com/reg-viz/reg-suit)
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| npm | reg-keygen-git-hash-plugin | < 0.10.16 | 0.10.16 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Reg-Keygen-Git-Hash Project | Reg-Keygen-Git-Hash | through 0.10.15 |
Weakness classification
References
- NVD record
- CVE.org record
- GitHub advisory
- https://github.com/reg-viz/reg-suit/commit/f84ad9c7a22144d6c147dc175c52756c0f444d87
- https://github.com/reg-viz/reg-suit/releases/tag/v0.10.16
- https://github.com/reg-viz/reg-suit/security/advisories/GHSA-49q3-8867-5wmp
- https://www.npmjs.com/package/reg-keygen-git-hash-plugin
- https://github.com/advisories/GHSA-49q3-8867-5wmp
- https://nvd.nist.gov/vuln/detail/CVE-2021-32673