CVE-2018-3785

A command injection in git-dummy-commit v1.3.0 allows os level commands to be executed due to an unescaped parameter.

Date published : 2018-08-17

https://hackerone.com/reports/341710