PatchSiren

danday74 CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

CRITICAL danday74 CVE published 2026-10-14

CVE-2026-110634

The CVE-2026-110634 vulnerability is an OS command injection issue in git-diff before version 2.0.7. This critical vulnerability allows attackers to execute shell commands by providing crafted strings to the gitDiff API, potentially leading to code execution with Node.js process privileges. The vulnerability was published on 2026-10-14T14:17:07.089Z and has not been modified since then. Defenders should p [truncated]