CVE-2020-28422
MEDIUMgit-archive - Command Injection via Exports Function
Title source: llmDescription
All versions of package git-archive are vulnerable to Command Injection via the exports function.
References (1)
Core 1
Core References
Third Party Advisory x_refsource_misc
https://security.snyk.io/vuln/SNYK-JS-GITARCHIVE-1050391
Scores
CVSS v3
6.4
EPSS
0.0047
EPSS Percentile
37.1%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:L
Details
CWE
CWE-77
Status
published
Products (2)
git-archive_project/git-archive
npm/git-archive
0npm
Published
Jul 25, 2022
Tracked Since
Feb 18, 2026