Arbitrary Argument Injection

Overview Affected versions of this package are vulnerable to Arbitrary Argument Injection due to the hook editor handling in cmd/uniget/hooks.go. An attacker can execute arbitrary commands by setting EDITOR or UNIGETEDITOR to a value containing shell metacharacters and then invoking the hook...

PT-2026-80465

uniget CLI has an EDITOR Command Injection in gitlab.com/uniget-org/cli...