Threats tagged 'ghsa-72rr-952g-697v'

1 threat

Threats tagged 'ghsa-72rr-952g-697v'
Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	7.8	EPSS 0.8%	CVE-2026-16022@oblique/cli · OS command injection High7.8EPSS 0.8%2026-08-05CVE Database V5CVE-2026-16022 CVE-2026-16022 is an OS command injection vulnerability in @oblique/cli version 15.4.0. The vulnerability arises because the CLI constructs shell commands using string concatenation and executes them with execSync(), inserting a user-controlled project name without proper sanitization. This allows an attacker to execute arbitrary operating system commands by supplying a crafted project name when invoking the CLI. EPSS 0.8%Vulnerability Swiss Federal Office of Information Technology, Systems and Telecommunication #cwe-78 #ghsa-72rr-952g-697v	CVE Database V5	2026-08-05

Showing 1–1 of 1 result