cbcvebase.

Pull It Project Pull It vulnerabilities

1 known vulnerability affecting pull_it_project/pull_it.

Total CVEs
1
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
CRITICAL1

Vulnerabilities

Page 1 of 1
CVE-2018-25083P2CRITICALCVSS 9.8fixed in 1.4.02023-03-27
CVE-2018-25083 [CRITICAL] CWE-78 CVE-2018-25083: The pullit package before 1.4.0 for Node.js allows OS Command Injection because eval is used on an a The pullit package before 1.4.0 for Node.js allows OS Command Injection because eval is used on an attacker-supplied Git branch name.
nvd
Pull It Project Pull It vulnerabilities | cvebase