GHSA-49q3-8867-5wmp

Suggest an improvement
Source
https://github.com/advisories/GHSA-49q3-8867-5wmp
Import Source
https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2021/06/GHSA-49q3-8867-5wmp/GHSA-49q3-8867-5wmp.json
JSON Data
https://api.test.osv.dev/v1/vulns/GHSA-49q3-8867-5wmp
Aliases
Related
Published
2021-06-08T18:47:06Z
Modified
2026-01-30T01:49:40.508585Z
Severity
  • 8.8 (High) CVSS_V3 - CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:L CVSS Calculator
Summary
Remote Command Execution in reg-keygen-git-hash-plugin
Details

Impact

reg-keygen-git-hash-plugin through 0.10.15 allow remote attackers to execute of arbitrary commands.

Patches

Upgrade to version 0.10.16 or later.

For more information

If you have any questions or comments about this advisory: - Open an issue in reg-viz/reg-suit

Database specific 
{
    "github_reviewed": true,
    "nvd_published_at": "2021-06-08T17:15:00Z",
    "severity": "HIGH",
    "github_reviewed_at": "2021-06-08T15:31:31Z",
    "cwe_ids": [
        "CWE-78",
        "CWE-94"
    ]
}
References

Affected packages

npm / reg-keygen-git-hash-plugin

Package

Name
reg-keygen-git-hash-plugin
View open source insights on deps.dev
Purl
pkg:npm/reg-keygen-git-hash-plugin

Affected ranges

Type
SEMVER
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
0.10.16

Database specific

source 
"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2021/06/GHSA-49q3-8867-5wmp/GHSA-49q3-8867-5wmp.json"