EUVD-2023-38214

Malicious code in bioql PyPI...

CVE-2023-34112

JavaCPP Presets is a project providing Java distributions of native C++ libraries. All the actions in the bytedeco/javacpp-presets use the github.event.headcommit.message​ parameter in an insecure way. For example, the commit message is used in a run statement - resulting in a command injection...

CVE-2023-34112

JavaCPP Presets is a project providing Java distributions of native C++ libraries. All the actions in the bytedeco/javacpp-presets use the github.event.headcommit.message​ parameter in an insecure way. For example, the commit message is used in a run statement - resulting in a command injection...

Command injection

JavaCPP Presets is a project providing Java distributions of native C++ libraries. All the actions in the bytedeco/javacpp-presets use the github.event.headcommit.message? parameter in an insecure way. For example, the commit message is used in a run statement - resulting in a command injection...

CVE-2023-34112

CVE-2023-34112 affects JavaCPP Presets (bytedeco/javacpp-presets) where actions use the github.event.head_commit.message in an insecure way, enabling command injection via string interpolation. The issue has no publicly reported exploits and is addressed in version 1.5.9; users are advised to upg...

CVE-2023-34112 JavaCPP project actions vulnerable to code injection

JavaCPP Presets is a project providing Java distributions of native C++ libraries. All the actions in the bytedeco/javacpp-presets use the github.event.headcommit.message​ parameter in an insecure way. For example, the commit message is used in a run statement - resulting in a command injection...

JavaCPP Presets 代码注入漏洞

JavaCPP Presets is a Bytedeco open source project to provide native C++ libraries for Java distributions. A code injection vulnerability exists in JavaCPP Presets versions prior to 1.5.9, which stems from the fact that all operations use parameters in an insecure manner that can lead to command...

PT-2023-24684 · Unknown · Javacpp Presets

Name of the Vulnerable Software and Affected Versions: JavaCPP Presets versions prior to 1.5.9 Description: The issue concerns the insecure use of the github.event.head commit.message parameter in JavaCPP Presets, leading to a command injection vulnerability due to string interpolation. No...