PT-2022-14911 · Libvcs · Libvcs

Name of the Vulnerable Software and Affected Versions: libvcs versions prior to 0.11.1 Description: The issue concerns Command Injection via argument injection. When the update repo function is called, specifically when using hg, the url parameter is passed to the hg clone command. This allows fo...