CVE-2021-23412
Published
CVSS v3
8.1
HIGH
CVSS v2
7.5
HIGH
Affected
1
PROJECT
Description
All versions of package gitlogplus are vulnerable to Command Injection via the main functionality, as options attributes are appended to the command to be executed without sanitization.
NPM