Vulnerability Database
Blog
FAQ
Docs
GHSA-fgxq-p49f-qw99
Suggest an improvement
Source
https://github.com/advisories/GHSA-fgxq-p49f-qw99
Import Source
https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2021/09/GHSA-fgxq-p49f-qw99/GHSA-fgxq-p49f-qw99.json
JSON Data
https://api.osv.dev/v1/vulns/GHSA-fgxq-p49f-qw99
Aliases
CVE-2021-30483
Published
2021-09-02T22:00:20Z
Modified
2023-11-08T04:05:46.460449Z
Severity
5.3 (Medium)
CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CVSS Calculator
Summary
Directory Traversal in isomorphic-git
Details
isomorphic-git before 1.8.2 allows Directory Traversal via a crafted repository.
References
https://nvd.nist.gov/vuln/detail/CVE-2021-30483
https://github.com/isomorphic-git/isomorphic-git/pull/1339
https://github.com/isomorphic-git/isomorphic-git
https://github.com/isomorphic-git/isomorphic-git/releases/tag/v1.8.2
https://vuln.ryotak.me/advisories/28
Affected packages
npm
/
isomorphic-git
Package
Name
isomorphic-git
View open source insights on deps.dev
Purl
pkg:npm/isomorphic-git
Affected ranges
Type
SEMVER
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
1.8.2
GHSA-fgxq-p49f-qw99 - OSV