CVE-2019-10802: OS Command Injection

February 28, 2020 (updated March 3, 2020)

The package giting allows execution of arbritary commands. The first argument repo of function pull() is executed by the package without any validation.

References

nvd.nist.gov/vuln/detail/CVE-2019-10802

Detect and mitigate CVE-2019-10802 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →