CVE-2023-31873

Gin 0.7.4 allows execution of arbitrary code when a crafted file is opened, e.g., via require'childprocess'...

EUVD-2023-36163

Malicious code in bioql PyPI...

CVE-2023-31873

Gin 0.7.4 allows execution of arbitrary code when a crafted file is opened, e.g., via require'childprocess'...

Security feature bypass

Gin 0.7.4 allows execution of arbitrary code when a crafted file is opened, e.g., via require'childprocess'...

CVE-2023-31873

CVE-2023-31873 affects Gin 0.7.4 (Electron-based Gin Markdown Editor). A crafted file can trigger arbitrary code execution via require('child_process'), as demonstrated in public PoC/exploit references (e.g., PacketStorm/EDB). Impact is local, with code execution possible when opening a crafted f...

CVE-2023-31873

Gin 0.7.4 allows execution of arbitrary code when a crafted file is opened, e.g., via require'childprocess'...