Threats tagged 'ghsa-9hv7-6jr2-3g59'

A vulnerability exists in cosmicstack-labs mercury-agent versions up to 1.1.13 in the checkShellCommand function, where validation occurs before canonicalization. This flaw could allow remote attackers to manipulate shell command execution order. The vulnerability has a low severity score and public exploit code is available. The project has been notified but has not yet responded or issued a fix.