← Database

CVE-2021-44684

CRITICAL CVSS: 9.8 Published: 2021-12-07 Modified: 2026-06-17

Description

naholyr github-todos 3.1.0 is vulnerable to command injection. The range argument for the _hook subcommand is concatenated without any validation, and is directly used by the exec function.

Affected Platforms

Github-Todos Project Github-Todos

Weakness Type

CWE-78

References