CRITICAL
danday74
CVE published 2026-10-14
CVE-2026-110634
The CVE-2026-110634 vulnerability is an OS command injection issue in git-diff before version 2.0.7. This critical vulnerability allows attackers to execute shell commands by providing crafted strings to the gitDiff API, potentially leading to code execution with Node.js process privileges. The vulnerability was published on 2026-10-14T14:17:07.089Z and has not been modified since then. Defenders should p [truncated]