Command Injection

Overview Affected versions of this package are vulnerable to Command Injection in the CLI, via the -c/--cmd option. The processing of commandline options in src/bin.mts calls the foregroundChild on them, which defaults to setting shell: true. An attacker who can control the filenames being matche...

CLSA-2025-1758704869 glibc: Fix of CVE-2020-1752

CVE-2020-1752: fix use-after-free vulnerability in glob...