CVE-2023-26107

All versions of the package sketchsvg are vulnerable to Arbitrary Code Injection when invoking shell.exec without sanitization nor parametrization while concatenating the current directory as part of the command string...

CVE-2023-26107

All versions of the package sketchsvg are vulnerable to Arbitrary Code Injection when invoking shell.exec without sanitization nor parametrization while concatenating the current directory as part of the command string...

CVE-2023-26107

The CVE-2023-26107 entry concerns the SketchSVG package. The vulnerability is an Arbitrary Code Injection flaw caused by calling shell.exec without proper sanitization or parameterization, while the command string concatenates the current directory. Affected software is the sketchsvg package (Nod...