Threats affecting pkg:github/mattieb/dye

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	6.6	EPSS 0.3%	CVE-2026-35197mattieb dye · Code Injection Medium6.6EPSS 0.3%2026-04-06CVE Database V5CVE-2026-35197 CVE-2026-35197 is a code injection vulnerability in the dye color library for shell scripts prior to version 1.1.1. Certain dye template expressions could lead to arbitrary code execution. The issue was discovered and fixed by the author in version 1.1.1. There are no known exploits in the wild. The vulnerability has a CVSS score of 6.6, indicating medium severity. EPSS 0.3%Vulnerability CWE-94	CVE Database V5	2026-04-06

Page 1 of 1