https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T11:25:38.228035+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2021-06535 cnvd-2021-06535 2026-10-04T11:25:38.231294+00:00 cnvd-2021-06535 https://cve.radiocsirt.org/vuln/euvd-2026-181517 EUVD-2026-181517 2026-10-04T11:25:38.231326+00:00 EUVD-2026-181517 https://cve.radiocsirt.org/vuln/fkie_cve-2021-23326 fkie_cve-2021-23326 2026-10-04T11:25:38.231341+00:00

This affects the package @graphql-tools/git-loader before 6.2.6. The use of exec and execSync in packages/loaders/git/src/load-git.ts allows arbitrary command injection.

 https://cve.radiocsirt.org/vuln/ghsa-vhhw-xjvf-wprr GHSA-vhhw-xjvf-wprr — Command Injection in @graphql-tools/git-loader 2026-10-04T11:25:38.231369+00:00

Affected: npm: @graphql-tools/git-loader

This affects the package @graphql-tools/git-loader before 6.2.6. The use of exec and execSync in packages/loaders/git/src/load-git.ts allows arbitrary command injection.

 https://cve.radiocsirt.org/vuln/gsd-2021-23326 gsd-2021-23326 2026-10-04T11:25:38.231391+00:00 gsd-2021-23326