CVE-2024-41815 Starship vulnerable to shell injection via undocumented, unpredictable shell expansion in custom commands

Starship is a cross-shell prompt. Starting in version 1.0.0 and prior to version 1.20.0, undocumented and unpredictable shell expansion and/or quoting rules make it easily to accidentally cause shell injection when using custom commands with starship in bash. This issue only affects users with...

CVE-2024-41815 Starship vulnerable to shell injection via undocumented, unpredictable shell expansion in custom commands

Starship is a cross-shell prompt. Starting in version 1.0.0 and prior to version 1.20.0, undocumented and unpredictable shell expansion and/or quoting rules make it easily to accidentally cause shell injection when using custom commands with starship in bash. This issue only affects users with...

CVE-2024-41815

Starship (shell prompt) is affected by CVE-2024-41815: before 1.20.0, undocumented shell expansion/quoting in custom commands can lead to shell injection in Bash. Impact is limited to users with custom commands, but local exploitation is possible. Version 1.20.0 contains the fix; upgrade to mitig...

CVE-2024-41815 Starship vulnerable to shell injection via undocumented, unpredictable shell expansion in custom commands

Starship is a cross-shell prompt. Starting in version 1.0.0 and prior to version 1.20.0, undocumented and unpredictable shell expansion and/or quoting rules make it easily to accidentally cause shell injection when using custom commands with starship in bash. This issue only affects users with...

Shell expansion in custom commands

Summary Undocumented and unpredictable shell expansion and/or quoting rules make it easily to accidentally cause shell injection when using custom commands with starship in bash. Details I wanted to show the git commit name in my prompt I use bash, so I added a command: custom.gitcommitname comma...

RUSTSEC-2024-0446 Shell expansion in custom commands

Summary Undocumented and unpredictable shell expansion and/or quoting rules make it easily to accidentally cause shell injection when using custom commands with starship in bash. Details I wanted to show the git commit name in my prompt I use bash, so I added a command: custom.gitcommitname comma...

Starship 安全漏洞

Starship is an open source prompt program for any shell by Starship Command. A security vulnerability exists in Starship version 1.0.0 through versions prior to 1.20.0. An attacker exploited the vulnerability to cause shell injection...

PT-2024-29581

Name of the Vulnerable Software and Affected Versions Starship versions 1.0.0 through 1.19.x Description Starship is a cross-shell prompt that has undocumented and unpredictable shell expansion and/or quoting rules, making it easy to accidentally cause shell injection when using custom commands...

CVE-2024-41815: Improper Neutralization of Special Elements used in a Command

Starship is a cross-shell prompt. Starting in version 1.0.0 and prior to version 1.20.0, undocumented and unpredictable shell expansion and/or quoting rules make it easily to accidentally cause shell injection when using custom commands with starship in bash. This issue only affects users with...

[SECURITY] Fedora 34 Update: rust-starship-0.56.0-2.fc34

Minimal, blazing-fast, and infinitely customizable prompt for any shell! =EF =BF=BD=EF=BF=BD=EF=BF=BD=EF=BF=BD=EF=BF=BD=EF=BF=BD=EF=BF=BD=EF=BF=BD=EF=BF =BD=EF=BF=BD...

Fedora: Security Advisory for rust-starship (FEDORA-2021-64e9e98eb4)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Battleship - Starship free - Native code usage, SD-card access, Suspicious files vulnerabilities

HackApp vulnerability scanner discovered that application Battleship - Starship free published at the 'play' market has multiple vulnerabilities...