Lucene search
+L

2 matches found

Positive Technologies
Positive Technologies
•added 2026/08/05 12:00 a.m.•12 views

PT-2026-68127

Name of the Vulnerable Software and Affected Versions @oblique/cli version 15.4.0 Description An OS command injection issue exists in the project creation functionality. The application constructs shell commands using string concatenation and executes them via the execSync function. Because the...

7.8CVSS6.5AI score0.00817EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/05 12:00 a.m.•11 views

CVE-2026-16022: Improper Neutralization of Special Elements used in an OS Command

@oblique/cli 15.4.0 contains an OS command injection vulnerability in the project creation functionality. The CLI constructs shell commands through string concatenation and executes them with execSync. A user-controlled project-name argument is inserted into the shell command without proper...

7.8CVSS6.2AI score0.00817EPSS
SaveExploits0References2
Rows per page
Query Builder