3 matches found
CLSA-2026-1781830588 TuxCare security update for glob (1 CVE)
TuxCare rebuilt glob to address 1 CVE. Fixed in 10.4.5-tuxcare.1...
7.5CVSS6.4AI score0.0309EPSS
SaveExploits1
Command Injection
Overview Affected versions of this package are vulnerable to Command Injection in the CLI, via the -c/--cmd option. The processing of commandline options in src/bin.mts calls the foregroundChild on them, which defaults to setting shell: true. An attacker who can control the filenames being matche...
7.7CVSS7.8AI score0.0309EPSS
SaveExploits1References2
20