Lucene search
+L

1 matches found

OSV
OSV
added 2026/04/22 10:6 p.m.13 views

GHSA-J5W5-568X-RQ53 Evolver: Command Injection via `execSync` in `_extractLLM()` function allows Remote Code Execution

Summary A command injection vulnerability in the extractLLM function allows attackers to execute arbitrary shell commands on the server. The function constructs a curl command using string concatenation and passes it to execSync without proper sanitization, enabling remote code execution when the...

9.8CVSS6.8AI score0.01305EPSS
SaveExploits0References4
Rows per page
Query Builder