2 matches found
Remote Code Execution (RCE)
Overview dependabot-omnibus is an Automated dependency management Affected versions of this package are vulnerable to Remote Code Execution RCE by cloning source branch containing malicious injectable bash code. Remediation Upgrade dependabot-omnibus to version 0.125.1 or higher. References -...
8.8CVSS7.4AI score0.03062EPSS
SaveExploits1References2
Remote Code Execution (RCE)
Overview dependabot-common is an Automated dependency management. Affected versions of this package are vulnerable to Remote Code Execution RCE by cloning source branch containing malicious injectable bash code. Remediation Upgrade dependabot-common to version 0.125.1 or higher. References - GitH...
8.8CVSS7.4AI score0.03062EPSS
SaveExploits1References2
20