Threats tagged 'ghsa-hpxg-grhm-7fxc'

A command injection vulnerability exists in 8421bit MiniClaw versions 0.8.0 and 0.9.0 in the resolveSkillScriptPath function of src/kernel.ts within the System Command Handler component. Exploit code is publicly available. The vulnerability has a medium severity with a CVSS score of 5.5. A patch identified by commit 223c16a1088e138838dcbd18cd65a37c35ac5a84 is available to resolve this issue.