Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

  1. Reconshell
  2. Vulnerabilities (CVE)
Filtered by vendor Async-git Project Subscribe
Filtered by product Async-git
Total 2 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2021-3190 1 Async-git Project 1 Async-git 2022-04-29 7.5 HIGH 9.8 CRITICAL
The async-git package before 1.13.2 for Node.js allows OS Command Injection via shell metacharacters, as demonstrated by git.reset and git.tag.
CVE-2020-28490 1 Async-git Project 1 Async-git 2021-07-21 7.5 HIGH 9.8 CRITICAL
The package async-git before 1.13.2 are vulnerable to Command Injection via shell meta-characters (back-ticks). For example: git.reset('atouch HACKEDb')