1 matches found
Sentry's Python SDK unintentionally exposes environment variables to subprocesses
ImpactThe bug in Sentry's Python SDK subprocess.checkoutput"env", env="TEST":"1"b'TEST=1\n'If you'd want to not pass any variables, you can set an empty dict: subprocess.checkoutput"env", env=b''However, the bug in Sentry SDK 2.8.0 causes all environment variables to be passed to the subprocesses...
5.3CVSS6AI score0.002EPSS
SaveExploits0References13Affected Software1
20