5 matches found
CVE-2025-8022
creationtimestamp| type| source ---|---|--- 2025-07-23 07:09:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lumhmnmig72w 2025-07-24 05:10:24+00:00| seen| https://bsky.app/profile/azu.bsky.social/post/3luorfvupsb2w 2025-08-21 06:00:47+00:00| seen|...
@ccci/micro-server (>=1.0.57, <=1.0.132), @kevinkidd/aicommit (1.0.3) +10 more potentially affected by CVE-2025-8022 via bun (>=1.0.2, <=1.1.38)
bun NPM version =1.0.2, =1.0.57, =1.0.0, =0.0.0, =1.2.27, =1.2.21, =0.0.2, =0.0.33, =0.0.19-beta.11, =0.0.3, =0.0.4, =0.0.7 Source cves: CVE-2025-8022 Source advisory: OSV:GHSA-4J66-8F4R-3PJX...
CVE-2025-8022
Rejected reason: Bun Shell does not invoke /bin/sh, or any other interpreter, for template literals created with the $ function. Each $… interpolation is treated as a single argument. The security responsibility for this usage pattern lies with the calling application, which must ensure the...