Vulnerabilities (CVE)

Filtered by vendor Push-dir Project Subscribe
Filtered by product Push-dir
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2019-10803 1 Push-dir Project 1 Push-dir 2024-11-21 7.5 HIGH 9.8 CRITICAL
push-dir through 0.4.1 allows execution of arbritary commands. Arguments provided as part of the variable "opt.branch" is not validated before being provided to the "git" command within "index.js#L139". This could be abused by an attacker to inject arbitrary commands.