Lucene search
+L

2 matches found

Github Security Blog
Github Security Blog
•added 2026/10/21 4:39 p.m.•4 views

virtualenv activate.fish runs commands from a path or prompt with a backslash before a quote

Impact FishActivator defines no quote, so it inherits ViaTemplateActivator.quote, which returns shlex.quotestring. That function follows POSIX sh rules, where a backslash inside single quotes stays a literal character. fish reads ' inside single quotes as an escaped quote and \ as an escaped...

7.8CVSS5.7AI score0.00211EPSS
SaveExploits0References5Affected Software1
osv_ghsa
osv_ghsa
•added 2026/10/21 4:39 p.m.•4 views

GHSA-C947-3PG5-GM8Q virtualenv activate.fish runs commands from a path or prompt with a backslash before a quote

Impact FishActivator defines no quote, so it inherits ViaTemplateActivator.quote, which returns shlex.quotestring. That function follows POSIX sh rules, where a backslash inside single quotes stays a literal character. fish reads ' inside single quotes as an escaped quote and \ as an escaped...

7.8CVSS5.7AI score0.00211EPSS
SaveExploits0References5
Rows per page
Query Builder