Masterminds/vcs

Masterminds/vcs

GitHubGitHub
GitHubgithub.com
Releases28
Frequency2 months 3 weeks
Last Release
Stars205
VCS Repo management through a common interface in Go
Log in to subscribe

CVE History

CVEPublishedCVSS v3CVSS v2
CVE-2022-21235↗
8.1 HIGH6.8 MEDIUM

The package github.com/masterminds/vcs before 1.13.3 are vulnerable to Command Injection via argument injection. When hg is executed, argument strings are passed to hg in a way that additional flags can be set. The additional flags can be used to perform a command injection.