VULNERABILITY INTELLIGENCE
CVE-2024-21531
CVSS score5.3 MEDIUM
EPSS probability0.95%
CISA KEVNot currently listed
Published2024-10-01
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Description
All versions of the package git-shallow-clone are vulnerable to Command injection due to missing sanitization or mitigation flags in the process variable of the gitShallowClone function.
Weakness classification
- report@snyk.io: CWE-78