All versions of package git-promise are vulnerable to Command Injection due to an inappropriate fix of a prior [vulnerability](https://security.snyk.io/vuln/SNYK-JS-GITPROMISE-567476) in this package. **Note:** Please note that the vulnerability will not be fixed. The README file was updated with a warning regarding this issue.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: snyk

Published: 2022-06-10T20:05:25.958534Z

Updated: 2024-09-16T20:11:49.507Z

Reserved: 2022-02-24T00:00:00

Link: CVE-2022-24376

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2022-06-10T20:15:08.010

Modified: 2024-11-21T06:50:17.610

Link: CVE-2022-24376

cve-icon Redhat

No data.