diff --git a/advisories/github-reviewed/2022/02/GHSA-926x-m6m5-3mmp/GHSA-926x-m6m5-3mmp.json b/advisories/github-reviewed/2022/02/GHSA-926x-m6m5-3mmp/GHSA-926x-m6m5-3mmp.json index 2f163663772..9b6af506ef1 100644 --- a/advisories/github-reviewed/2022/02/GHSA-926x-m6m5-3mmp/GHSA-926x-m6m5-3mmp.json +++ b/advisories/github-reviewed/2022/02/GHSA-926x-m6m5-3mmp/GHSA-926x-m6m5-3mmp.json @@ -1,13 +1,13 @@ { "schema_version": "1.4.0", "id": "GHSA-926x-m6m5-3mmp", - "modified": "2021-04-09T21:01:28Z", + "modified": "2023-09-11T18:16:40Z", "published": "2022-02-09T22:50:06Z", "aliases": [ "CVE-2019-10803" ], - "summary": "OS Command Injection", - "details": "push-dir through 0.4.1 allows execution of arbritary commands. Arguments provided as part of the variable "opt.branch" is not validated before being provided to the "git" command within "index.js#L139". This could be abused by an attacker to inject arbitrary commands.", + "summary": "push-dir Enables OS Command Injection", + "details": "push-dir through 0.4.1 allows execution of arbritary commands. Arguments provided as part of the variable `opt.branch` is not validated before being provided to the `git` command within [index.js#L139](https://github.com/L33T-KR3W/push-dir/blob/master/index.js#L139). This could be abused by an attacker to inject arbitrary commands.", "severity": [ { "type": "CVSS_V3", @@ -20,6 +20,11 @@ "ecosystem": "npm", "name": "push-dir" }, + "ecosystem_specific": { + "affected_functions": [ + "" + ] + }, "ranges": [ { "type": "ECOSYSTEM", @@ -53,7 +58,7 @@ "cwe_ids": [ "CWE-78" ], - "severity": "HIGH", + "severity": "CRITICAL", "github_reviewed": true, "github_reviewed_at": "2021-04-09T21:01:28Z", "nvd_published_at": "2020-02-28T21:15:00Z"