medium5.3
CVE-2024-21531
git-shallow-clone Argument Injection vulnerability
Impact
All versions of the package git-shallow-clone are vulnerable to Argument injection due to missing sanitization or mitigation flags in the process variable of the gitShallowClone function.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| npm | git-shallow-clone | <= 0.0.2 | none recorded |
Weakness classification
References
- NVD record
- CVE.org record
- GitHub advisory
- https://github.com/10uei011/git-shallow-clone/blob/master/index.js%23L27
- https://security.snyk.io/vuln/SNYK-JS-GITSHALLOWCLONE-3253853
- https://github.com/advisories/GHSA-qwrq-vxvw-537r
- https://nvd.nist.gov/vuln/detail/CVE-2024-21531
- https://github.com/10uei011/git-shallow-clone/blob/master/index.js#L27