CVE-2021-23412: Gitlogplus Project Gitlogplus

Critical severity, CVSS 9.8. EPSS: 4% chance of exploitation in the next 30 days.

All versions of package gitlogplus are vulnerable to Command Injection via the main functionality, as options attributes are appended to the command to be executed without sanitization.

Affected products

• Gitlogplus Project Gitlogplus: version 3.1.3 only; version 3.1.4 only; version 3.1.5 only; version 3.1.6 only; version 3.1.7 only

Published 2021-07-23. Last modified 2026-06-17.