CVE-2021-26541: Gitlog Project Gitlog

Critical severity, CVSS 9.8. EPSS: 5.4% chance of exploitation in the next 30 days.

The gitlog function in src/index.ts in gitlog before 4.0.4 has a command injection vulnerability.

Affected products

• Gitlog Project Gitlog: before 4.0.4 (fixed in 4.0.4)

Published 2021-02-08. Last modified 2026-06-17.