Threat database

1 threat

Threat database
Severity	CVSS	Signals	Threat	Source	Published	Score and star
Low	2.8	EPSS 0.2%	CVE-2025-54314Thor · OS Command Injection Low2.8EPSS 0.2%2025-07-20CVE Database V5CVE-2025-54314 Thor before 1.4.0 can construct an unsafe shell command from library input. NOTE: this is disputed by the Supplier because "the method that was fixed can only be used with arguments that are controlled by Thor, and there is no way an attacker can take control of those arguments." EPSS 0.2%Vulnerability rubyonrails #cwe-78 United Kingdom+4	CVE Database V5	2025-07-20

Showing 1–1 of 1 result