Skip to content

CVE record · 1 source

CVE-2026-110634

CVSS 9.8

git-diff before 2.0.7 contains an OS command injection vulnerability that allows attackers to execute shell commands by supplying crafted strings to…

Vendor: Node.js
Product: Node.js
CVSS: 9.8
EPSS: 0.023 (p84)
Exposure class: Developer platform

Coverage

1

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

23

CVE NVD 17d ago

git-diff before 2.0.7 contains an OS command injection vulnerability that allows attackers to execute shell commands by supplying crafted strings to…

git-diff before 2.0.7 contains an OS command injection vulnerability that allows attackers to execute shell commands by supplying crafted strings to the gitDiff API. Attackers who control a diffed document string can embed $(cmd)…

CVSS 9.8 CVE-2026-110634 Node.js