Threats tagged 'ghsa-fm4v-42hr-rpgp'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
High	8.7	CVE-2026-120203ShowDoc 2.8.14 before 3.9.6 contains a code injection vulnerability in its Mock feature that allows authenticated High8.72026-10-31GCVE DatabaseCVE-2026-120203 ShowDoc versions from 2.8.14 up to but not including 3.9.6 contain a code injection vulnerability in the Mock feature. Authenticated users can exploit this flaw to execute arbitrary shell commands with root privileges in the official Docker image by leveraging mockjs templates evaluated via eval(). This vulnerability has a high severity rating with a CVSS score of 8.8. Report on CVE-2026-120203 Vulnerability CWE-94 #ghsa-fm4v-42hr-rpgp	GCVE Database	2026-10-31

Page 1 of 1