Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
All versions of the package ggit are vulnerable to Arbitrary Argument Injection via the clone() API, which allows specifying the remote URL to clone and the file on disk to clone to. The library does not sanitize for user input or validate a given URL scheme, nor does it properly pass command-line flags to the git binary using the double-dash POSIX characters (--) to communicate the end of options.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L
Vulnerability Type
参数注入或修改
Vulnerability Title
ggit 安全漏洞
Vulnerability Description
ggit是Gleb Bahmutov个人开发者的一个工具。 ggit存在安全漏洞，该漏洞源于不会清理用户输入或验证给定的URL方案，容易受到任意参数注入攻击。
CVSS Information
N/A
Vulnerability Type
N/A