Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 09 Oct 2026 13:40:41 +0000 EUVD-2026-276842 https://cve.radiocsirt.org/vuln/euvd-2026-276842 EUVD-2026-276842 https://cve.radiocsirt.org/vuln/euvd-2026-276842 fkie_cve-2024-21533 https://cve.radiocsirt.org/vuln/fkie_cve-2024-21533 <p>All versions of the package ggit are vulnerable to Arbitrary Argument Injection via the clone() API, which allows specifying the remote URL to clone and the file on disk to clone to. The library does not sanitize for user input or validate a given URL scheme, nor does it properly pass command-line flags to the git binary using the double-dash POSIX characters (--) to communicate the end of options.</p> <p>All versions of the package ggit are vulnerable to Arbitrary Argument Injection via the clone() API, which allows specifying the remote URL to clone and the file on disk to clone to. The library does not sanitize for user input or validate a given URL scheme, nor does it properly pass command-line flags to the git binary using the double-dash POSIX characters (--) to communicate the end of options.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-21533 GHSA-pr45-cg4x-ff4m — ggit is vulnerable to Arbitrary Argument Injection via the clone() API https://cve.radiocsirt.org/vuln/ghsa-pr45-cg4x-ff4m <p><strong>Affected:</strong> npm: ggit</p> <p>All versions of the package ggit are vulnerable to Arbitrary Argument Injection via the clone() API, which allows specifying the remote URL to clone and the file on disk to clone to. The library does not sanitize for user input or validate a given URL scheme, nor does it properly pass command-line flags to the git binary using the double-dash POSIX characters (--) to communicate the end of options.</p> <p><strong>Affected:</strong> npm: ggit</p> <p>All versions of the package ggit are vulnerable to Arbitrary Argument Injection via the clone() API, which allows specifying the remote URL to clone and the file on disk to clone to. The library does not sanitize for user input or validate a given URL scheme, nor does it properly pass command-line flags to the git binary using the double-dash POSIX characters (--) to communicate the end of options.</p> https://cve.radiocsirt.org/vuln/ghsa-pr45-cg4x-ff4m gsd-2024-21533 https://cve.radiocsirt.org/vuln/gsd-2024-21533 gsd-2024-21533 https://cve.radiocsirt.org/vuln/gsd-2024-21533