npm git-shallow-clone vulnerabilities

Latest npm git-shallow-clone CVEs

Newest publication first

1. CVE-2024-21531 git-shallow-clone Argument Injection vulnerability

   Published 2024-10-01

   Medium·CVSS 5.3 EPSS 0.95%

   All versions of the package git-shallow-clone are vulnerable to Command injection due to missing sanitization or mitigation flags in the process variable of the gitShallowClone function.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.