Lucene search

K
osvGoogleOSV:CVE-2021-3769
HistoryNov 30, 2021 - 10:15 a.m.

CVE-2021-3769

2021-11-3010:15:09
Google
osv.dev
6
cve-2021-3769
pygmalion
pygmalion-virtualenv
refined
print -p
user-supplied strings
terminal vulnerability

AI Score

6.7

Confidence

High

EPSS

0.002

Percentile

61.2%

Vulnerability in pygmalion, pygmalion-virtualenv and refined themes Description: these themes use print -P on user-supplied strings to print them to the terminal. All of them do that on git information, particularly the branch name, so if the branch has a specially-crafted name the vulnerability can be exploited.Fixed in: b3ba9978.Impacted areas: - pygmalion theme. - pygmalion-virtualenv theme. - refined theme.

AI Score

6.7

Confidence

High

EPSS

0.002

Percentile

61.2%

Related for OSV:CVE-2021-3769