CVE-2024-58266

Published July 27th, 2025

View on NVD ↗

CVSS v3

3.2

LOW

CVSS v2

N/A

Affected

2

PROJECTS

Description

The shlex crate before 1.2.1 for Rust allows unquoted and unescaped instances of the { and \xa0 characters, which may facilitate command injection.

Split a string into shell words, like Python's shlex.

Crates.io

552M

comex/rust-shlex

Split a string into shell words, like Python's shlex.

GitHub

147