Gitlog
1 CVEs
product
Monthly
The gitlog function in src/index.ts in gitlog before 4.0.4 has a command injection vulnerability. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.
Command Injection
Gitlog
NVD
GitHub
CVSS 3.1
9.8
EPSS
5.4%
CVE-2021-26541
npm
EPSS 5%
CVSS 9.8
CRITICAL
POC
PATCH
Act Now
The gitlog function in src/index.ts in gitlog before 4.0.4 has a command injection vulnerability. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.
Command Injection
Gitlog
NVD
GitHub