Threats tagged 'ghsa-h9gr-58w4-64cq'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	8.8	EPSS 1.9%	CVE-2026-70375HashBrownCMS hashbrown-cms · OS Command Injection High8.8EPSS 1.9%2026-08-05CVE Database V5CVE-2026-70375 HashBrown CMS through 1.4.6 contains an OS Command Injection vulnerability (CWE-78) in the Git deployer component. GitDeployer.pullRepo in src/Server/Entity/Deployer/GitDeployer.js executes AppService.exec, interpolating the configured branch value directly into a shell command with no escaping. EPSS 1.9%Vulnerability CWE-78 #ghsa-h9gr-58w4-64cq	CVE Database V5	2026-08-05

Page 1 of 1