Skip to main content
← npm

@finos/git-proxy

4 known vulnerabilities (4 high), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
4 · 4 high
Registry
npm

Advisories 4

  • GitProxy is susceptible to a hidden commits injection attack

    Affected: fixed in 1.19.2.

  • GitProxy is vulnerable to a new branch approval exploit

    Affected: fixed in 1.19.2.

  • GitProxy is vulnerable to a packfile parsing exploit

    Affected: fixed in 1.19.2.

  • GitProxy bypasses approvals when pushing multiple branches

    Affected: fixed in 1.19.2.