CVE-2019-10776

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2019-10776

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2019-10776.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2019-10776

Aliases

GHSA-84cm-v6jp-gjmr

Related

SNYK (2)

SNYK-JS-GITDIFFAPPLY-540774
SNYK-JS-GITDIFFAPPLY-540774,

Published

2020-01-07T19:15:10Z

Modified

2026-10-20T10:50:40Z

Severity

9.8 (Critical) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator

Summary

[none]

Details

In "index.js" file line 240, the run command executes the git command with a user controlled variable called remoteUrl. This affects git-diff-apply all versions prior to 0.22.2.

References

Affected packages

Git / github.com/kellyselden/git-diff-apply

Affected ranges

Type

GIT

Repo

https://github.com/kellyselden/git-diff-apply

Events

Introduced

Fixed

f7d96d14d806ad1678edb7521d755aeac7cb37d2

Fixed

106d61d3ae723b4257c2a13e67b95eb40a27e0b5

Database specific

Show details

{
    "extracted_events":  [
        {
            "cpe":  "cpe:2.3:a:git-diff-apply_project:git-diff-apply:*:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "0"
                },
                {
                    "fixed":  "0.22.2"
                }
            ],
            "source":  "CPE_RANGE"
        },
        {
            "range":  [
                {
                    "fixed":  "106d61d3ae723b4257c2a13e67b95eb40a27e0b5"
                }
            ],
            "source":  "REFERENCES_COMMIT"
        }
    ]
}

Affected versions

v0.*

v0.0.1

v0.0.2

v0.0.3

v0.0.4

v0.0.5

v0.1.0

v0.1.1

v0.1.2

v0.1.3

v0.1.4

v0.1.5

v0.1.6

v0.1.7

v0.1.8

v0.10.0

v0.10.1

v0.10.2

v0.10.3

v0.10.4

v0.11.0

v0.11.1

v0.11.2

v0.11.3

v0.12.0

v0.13.0

v0.14.0

v0.14.1

v0.14.10

v0.14.11

v0.14.12

v0.14.2

v0.14.3

v0.14.4

v0.14.5

v0.14.6

v0.14.7

v0.14.8

v0.14.9

v0.15.0

v0.15.1

v0.15.2

v0.15.3

v0.15.4

v0.15.5

v0.15.6

v0.15.7

v0.16.0

v0.16.1

v0.16.2

v0.17.0

v0.17.1

v0.17.2

v0.17.3

v0.17.4

v0.18.0

v0.18.1

v0.18.2

v0.19.0

v0.19.1

v0.19.10

v0.19.11

v0.19.12

v0.19.13

v0.19.2

v0.19.3

v0.19.4

v0.19.5

v0.19.6

v0.19.7

v0.19.8

v0.19.9

v0.2.0

v0.2.1

v0.2.2

v0.20.0

v0.20.1

v0.20.2

v0.20.3

v0.20.4

v0.20.5

v0.20.6

v0.21.0

v0.22.0

v0.22.1

v0.3.0

v0.3.1

v0.3.2

v0.3.3

v0.3.4

v0.3.5

v0.4.0

v0.4.1

v0.5.0

v0.5.1

v0.6.0

v0.6.1

v0.7.0

v0.8.0

v0.8.1

v0.8.2

v0.8.3

v0.8.4

v0.9.0

v0.9.1

v0.9.2

v0.9.3

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2019-10776.json"