https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T18:18:17.506955+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-276841 EUVD-2026-276841 2026-10-09T18:18:17.569550+00:00 EUVD-2026-276841 https://cve.radiocsirt.org/vuln/fkie_cve-2024-21532 fkie_cve-2024-21532 2026-10-09T18:18:17.569600+00:00

All versions of the package ggit are vulnerable to Command Injection via the fetchTags(branch) API, which allows user input to specify the branch to be fetched and then concatenates this string along with a git command which is then passed to the unsafe exec() Node.js child process API.

 https://cve.radiocsirt.org/vuln/ghsa-62cx-5xj4-wfm4 GHSA-62cx-5xj4-wfm4 — ggit is vulnerable to Command Injection via the fetchTags(branch) API 2026-10-09T18:18:17.569634+00:00

Affected: npm: ggit

All versions of the package ggit are vulnerable to Command Injection via the fetchTags(branch) API, which allows user input to specify the branch to be fetched and then concatenates this string along with a git command which is then passed to the unsafe exec() Node.js child process API.

 https://cve.radiocsirt.org/vuln/gsd-2024-21532 gsd-2024-21532 2026-10-09T18:18:17.569661+00:00 gsd-2024-21532