https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 09:33:28 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-20738 EUVD-2026-20738 https://cve.radiocsirt.org/vuln/euvd-2026-20738 https://cve.radiocsirt.org/vuln/fkie_cve-2021-3190 <p>The async-git package before 1.13.2 for Node.js allows OS Command Injection via shell metacharacters, as demonstrated by git.reset and git.tag.</p> <p>The async-git package before 1.13.2 for Node.js allows OS Command Injection via shell metacharacters, as demonstrated by git.reset and git.tag.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-3190 https://cve.radiocsirt.org/vuln/ghsa-6c3f-p5wp-34mh <p><strong>Affected:</strong> npm: async-git</p> <p>The async-git package before 1.13.2 for Node.js allows OS Command Injection via shell metacharacters, as demonstrated by git.reset and git.tag. This issue may lead to remote code execution if a client of the library calls the vulnerable method with untrusted input. Ensure to sanitize untrusted user input before passing it to one of the vulnerable functions as a workaround or update async-git to version 1.13.1.</p> <p><strong>Affected:</strong> npm: async-git</p> <p>The async-git package before 1.13.2 for Node.js allows OS Command Injection via shell metacharacters, as demonstrated by git.reset and git.tag. This issue may lead to remote code execution if a client of the library calls the vulnerable method with untrusted input. Ensure to sanitize untrusted user input before passing it to one of the vulnerable functions as a workaround or update async-git to version 1.13.1.</p> https://cve.radiocsirt.org/vuln/ghsa-6c3f-p5wp-34mh https://cve.radiocsirt.org/vuln/gsd-2021-3190 gsd-2021-3190 https://cve.radiocsirt.org/vuln/gsd-2021-3190