Lucene search
+L

1 matches found

OSV
OSV
added 2024/07/02 8:15 p.m.9 views

AZL-52719 CVE-2023-24531 affecting package golang for versions less than 1.21.0-1

Command go env is documented as outputting a shell script containing the Go environment. However, go env doesn't sanitize values, so executing its output as a shell script can cause various bad bahaviors, including executing arbitrary commands or inserting new environment variables. This issue is...

9.8CVSS7.1AI score0.0084EPSS
SaveExploits0References1
Rows per page
Query Builder