Lucene search
+L

3 matches found

Veracode
Veracode
•added 2026/10/21 9:30 p.m.•46 views

Virtualenv Activate.fish Runs Commands From A Path Or Prompt With A Backslash Before A Quote

Impact "FishActivator" defines no "quote", so it inherits "ViaTemplateActivator.quote", which returns "shlex.quotestring". That function follows POSIX "sh" rules, where a backslash inside single quotes stays a literal character. fish reads "'" inside single quotes as an escaped quote and "\" as...

7.8CVSS7.4AI score0.00236EPSS
SaveExploits0References3Affected Software1
Github Security Blog
Github Security Blog
•added 2026/10/21 4:39 p.m.•43 views

virtualenv activate.fish runs commands from a path or prompt with a backslash before a quote

Impact FishActivator defines no quote, so it inherits ViaTemplateActivator.quote, which returns shlex.quotestring. That function follows POSIX sh rules, where a backslash inside single quotes stays a literal character. fish reads ' inside single quotes as an escaped quote and \ as an escaped...

7.8CVSS7.3AI score0.00236EPSS
SaveExploits0References5Affected Software1
osv_ghsa
osv_ghsa
•added 2026/10/21 4:39 p.m.•24 views

GHSA-C947-3PG5-GM8Q virtualenv activate.fish runs commands from a path or prompt with a backslash before a quote

Impact FishActivator defines no quote, so it inherits ViaTemplateActivator.quote, which returns shlex.quotestring. That function follows POSIX sh rules, where a backslash inside single quotes stays a literal character. fish reads ' inside single quotes as an escaped quote and \ as an escaped...

7.8CVSS7.3AI score0.00236EPSS
SaveExploits0References5
Rows per page
Query Builder