2 matches found
PT-2026-68127
Name of the Vulnerable Software and Affected Versions @oblique/cli version 15.4.0 Description An OS command injection issue exists in the project creation functionality. The application constructs shell commands using string concatenation and executes them via the execSync function. Because the...
7.8CVSS6.5AI score0.00817EPSS
SaveExploits0References3
CVE-2026-16022: Improper Neutralization of Special Elements used in an OS Command
@oblique/cli 15.4.0 contains an OS command injection vulnerability in the project creation functionality. The CLI constructs shell commands through string concatenation and executes them with execSync. A user-controlled project-name argument is inserted into the shell command without proper...
7.8CVSS6.2AI score0.00817EPSS
SaveExploits0References2
20