Lucene search
CVE-2020-26222
Dependabot-Core <= 0.125.1 allows remote code execution via injectable bash code in source branch names
Show more
| Reporter | Title | Published | Views | Family All 10 |
|---|---|---|---|---|
 | CVE-2020-26222 | 5 Feb 202513:33 | – | redhatcve |
 | CVE-2020-26222 | 13 Nov 202016:15 | – | nvd |
 | Remote Code Execution | 16 Nov 202004:10 | – | veracode |
 | Remote code execution in dependabot-core branch names when cloning | 12 Nov 202021:00 | – | rubygems |
| Remote code execution in dependabot-core branch names when cloning | 12 Nov 202021:00 | – | rubygems |
 | Remote code execution in dependabot-core branch names when cloning | 13 Nov 202015:47 | – | osv |
| CVE-2020-26222 | 13 Nov 202016:15 | – | osv |
 | Remote code execution | 13 Nov 202016:15 | – | prion |
 | Remote code execution in dependabot-core branch names when cloning | 13 Nov 202015:47 | – | github |
 | CVE-2020-26222 Remote code execution in dependabot-core | 13 Nov 202016:00 | – | cvelist |
10
Node
OROR
[
{
"product": "dependabot-core",
"vendor": "dependabot",
"versions": [
{
"status": "affected",
"version": "< 0.125.1"
}
]
}
]Transform Your Security Services
Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.
Book a live demo13 Nov 2020 16:15Current
8.9High risk
Vulners AI Score8.9
CVSS26.5
CVSS38.7 - 8.8
EPSS0.00623