What is GHSA-ggmw-mjhv-75rm?

GHSA-ggmw-mjhv-75rm is a security advisory published by GitHub Security Advisories with High severity. NietThijmen ShoppingCart: Command injection in the connect function

Which CVE IDs does GHSA-ggmw-mjhv-75rm cover?

GHSA-ggmw-mjhv-75rm covers the following CVE IDs: CVE-2024-53412. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-ggmw-mjhv-75rm?

GHSA-ggmw-mjhv-75rm has a CVSS v3 base score of 8.4, published by GitHub Security Advisories.

Which products are affected by GHSA-ggmw-mjhv-75rm?

GHSA-ggmw-mjhv-75rm affects 1 product, including: go/github.com/NietThijmen/ShoppingCart:\u003c= 0.0.0-20241101155353-3dd137080276.

GHSA-ggmw-mjhv-75rmHighCVSS 8.4

NietThijmen ShoppingCart: Command injection in the connect function

Vendor

GitHub Security Advisories

Published

April 15, 2026

Last Modified

July 21, 2026

🔗 CVE IDs covered (1)

CVE-2024-53412 →

📋 Description

Command injection in the connect function in NietThijmen ShoppingCart 0.0.2 allows an attacker to execute arbitrary shell commands and achieve remote code execution via injection of malicious payloads into the Port field

🎯 Affected products1

go/github.com/NietThijmen/ShoppingCart:<= 0.0.0-20241101155353-3dd137080276

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2024-53412
https://github.com/NietThijmen/ShoppingCart/issues/1
https://github.com/Buckdray/vulnerability-research/blob/main/CVE-2024-53412/README.md
https://github.com/advisories/GHSA-ggmw-mjhv-75rm