Threats affecting pkg:github/obs-service-tar_scm

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Critical	10.0	EPSS 0.7%	CVE-2026-56004openSUSE buildservice · OS Command Injection Critical10.0EPSS 0.7%2026-07-02CVE Database V5CVE-2026-56004 A shellcode injection in the mercurial handler of the obs tar_scm source service before version 0.12.4 could be used by attackers able to provide a _service file to execute code as the source service or the local user checking out the malicious services EPSS 0.7%Vulnerability CWE-78	CVE Database V5	2026-07-02

Page 1 of 1