https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 25 Oct 2026 05:41:23 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-50294 EUVD-2026-50294 https://cve.radiocsirt.org/vuln/euvd-2026-50294 https://cve.radiocsirt.org/vuln/fkie_cve-2019-5485 <p>NPM package gitlabhook version 0.0.17 is vulnerable to a Command Injection vulnerability. Arbitrary commands can be injected through the repository name.</p> <p>NPM package gitlabhook version 0.0.17 is vulnerable to a Command Injection vulnerability. Arbitrary commands can be injected through the repository name.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2019-5485 https://cve.radiocsirt.org/vuln/ghsa-549f-73hh-mj38 <p><strong>Affected:</strong> npm: gitlabhook</p> <p>All versions of `gitlabhook` are vulnerable to Command Injection. The package does not validate input the body of POST request and concatenates it to an exec call, allowing attackers to run arbitrary commands in the system.</p> <p>## Recommendation</p> <p>No fix is currently available. Consider using an alternative package until a fix is made available.</p> <p><strong>Affected:</strong> npm: gitlabhook</p> <p>All versions of `gitlabhook` are vulnerable to Command Injection. The package does not validate input the body of POST request and concatenates it to an exec call, allowing attackers to run arbitrary commands in the system.</p> <p>## Recommendation</p> <p>No fix is currently available. Consider using an alternative package until a fix is made available.</p> https://cve.radiocsirt.org/vuln/ghsa-549f-73hh-mj38 https://cve.radiocsirt.org/vuln/gsd-2019-5485 gsd-2019-5485 https://cve.radiocsirt.org/vuln/gsd-2019-5485