Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2026/05/21 8:22 p.m.16 views

Snappy: Binary path is never shell-escaped due to an inverted is_executable check

Impact On POSIX, escapeshellarg‘/usr/bin/wkhtmltopdf’ returns the literal string ‘/usr/bin/wkhtmltopdf’ with the single-quote characters included. isexecutable then looks for a file whose actual name contains those quote characters, which essentially never exists. The safe branch is dead code and...

7.5CVSS6AI score0.00152EPSS
SaveExploits0References4Affected Software1
Rows per page
Query Builder