EUVD-2020-1442

🗓️ 07 Oct 2025 00:30:54Reported by EUVDType

Dependabot prior to version 0.125.1 has a remote code execution vulnerability fix applied in 0.125.1

Reporter	Title	Published	Views	Family All 13
Circl	CVE-2020-26222	13 Nov 202018:33	–	circl
CVE	CVE-2020-26222	13 Nov 202016:00	–	cve
Cvelist	CVE-2020-26222 Remote code execution in dependabot-core	13 Nov 202016:00	–	cvelist
Github Security Blog	Remote code execution in dependabot-core branch names when cloning	13 Nov 202015:47	–	github
NVD	CVE-2020-26222	13 Nov 202016:15	–	nvd
OSV	GHSA-23F7-99JX-M54R Remote code execution in dependabot-core branch names when cloning	13 Nov 202015:47	–	osv
Prion	Remote code execution	13 Nov 202016:15	–	prion
RedhatCVE	CVE-2020-26222	5 Feb 202513:33	–	redhatcve
RubySec	Remote code execution in dependabot-core branch names when cloning	13 Nov 202000:00	–	rubygems
RubySec	Remote code execution in dependabot-core branch names when cloning	13 Nov 202000:00	–	rubygems

[
  {
    "enisaIdVendor": [
      {
        "id": "58063171-133d-3ac5-bfba-60a0fcbd30fe",
        "vendor": {
          "name": "dependabot"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "1157728e-bcb3-3226-90a4-50a3a5007003",
        "product": {
          "name": "dependabot-core"
        },
        "product_version": "< 0.125.1"
      }
    ]
  }
]

Source	Link
github	www.github.com/dependabot/dependabot-core/security/advisories/GHSA-23f7-99jx-m54r
nvd	www.nvd.nist.gov/vuln/detail/CVE-2020-26222
github	www.github.com/dependabot/dependabot-core/pull/2727
github	www.github.com/dependabot/dependabot-core/commit/e089116abbe284425b976f7920e502b8e83a61b5
github	www.github.com/dependabot/dependabot-core
github	www.github.com/rubysec/ruby-advisory-db/blob/master/gems/dependabot-common/CVE-2020-26222.yml
github	www.github.com/rubysec/ruby-advisory-db/blob/master/gems/dependabot-omnibus/CVE-2020-26222.yml
rubygems	www.rubygems.org/gems/dependabot-common
rubygems	www.rubygems.org/gems/dependabot-omnibus
github	www.github.com/advisories/GHSA-293c-r3p4-g63r

07 Oct 2025 00:30Current

8.5High risk

Vulners AI Score8.5

CVSS 3.18.7 - 8.8

CVSS 26.5

EPSS0.00477