6 matches found
CVE-2026-67434
A flaw was found in PHPCodeSniffer. This command injection vulnerability allows an attacker to execute arbitrary shell commands. This occurs when PHPCodeSniffer processes untrusted files with specially crafted filenames containing shell metacharacters, specifically when generating Gitblame,...
Fedora 26 : php-pear-PHP-CodeSniffer (2017-b85d51cc47)
Version 3.0.1 - This release contains a fix for a security advisory related to the improper handling of a shell command - A properly crafted filename would allow for arbitrary code execution when using the --filter=gitmodified command line option - All version 3 users are encouraged to upgrade to...
[SECURITY] Fedora 26 Update: php-pear-PHP-CodeSniffer-3.0.1-1.fc26
PHPCodeSniffer provides functionality to verify that code conforms to certain standards, such as PEAR, or user-defined...
Arbitrary shell execution
Security Advisory - This release contains a fix for a security advisory related to the improper handling of a shell command - A properly crafted filename would allow for arbitrary code execution when using the --filter=gitmodified command line option - All version 3 users are encouraged to upgrad...