Lucene search
+L

30 matches found

OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/06/25 10:13 p.m.•14 views

Malicious code in starship-timeline (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a4e552337fa70064e0a04644ee5a64378809a85b281eda24707bc9a6eba473f [email protected] ships no real functionality. Its package.json declares a preinstall hook "preinstall": "node index.js" that runs automaticall...

5.6AI score
SaveExploits0References3
Wolfi
Wolfi
•added 2026/05/07 7:48 p.m.•55 views

GHSA-F89H-2FJH-2R9Q vulnerabilities

Vulnerabilities for packages: cargo-audit, cargo-c, starship, codex...

5.7AI score
SaveExploits0
Wolfi
Wolfi
•added 2026/05/07 7:48 p.m.•43 views

CVE-2026-44471 vulnerabilities

Vulnerabilities for packages: cargo-audit, cargo-c, starship, codex...

7.8CVSS7.3AI score0.00206EPSS
SaveExploits1
Chainguard
Chainguard
•added 2026/05/07 7:18 p.m.•42 views

CVE-2026-44471 vulnerabilities

Vulnerabilities for packages: watchexec, codex, cargo-audit, jujutsu, starship, cargo-c...

7.8CVSS7.3AI score0.00206EPSS
SaveExploits1
Chainguard
Chainguard
•added 2026/05/07 7:18 p.m.•20 views

GHSA-F89H-2FJH-2R9Q vulnerabilities

Vulnerabilities for packages: watchexec, codex, cargo-audit, jujutsu, starship, cargo-c...

5.7AI score
SaveExploits0
Wolfi
Wolfi
•added 2026/01/14 1:48 a.m.•5 views

GHSA-6MW6-MJ76-GRWC vulnerabilities

Vulnerabilities for packages: cargo-audit, cargo-c, starship...

5.7AI score
SaveExploits0
Wolfi
Wolfi
•added 2026/01/07 1:51 a.m.•11 views

CVE-2025-4574 vulnerabilities

Vulnerabilities for packages: oxipng, ruff, zed, yara-x, cargo-audit, cargo-c, deno, nushell, starship, wadm, yazi, samply, lychee, rust-analyzer, oranda, fd, pixi, wasmcloud...

6.5CVSS6.7AI score0.0054EPSS
SaveExploits0
Chainguard
Chainguard
•added 2026/01/07 1:29 a.m.•23 views

CVE-2025-4574 vulnerabilities

Vulnerabilities for packages: yara-x, oxipng, yazi, ztunnel, wadm, lychee, fd, starship, samply, rust-analyzer, ruff, wasmcloud, nushell, cargo-audit, oranda, zed, pixi, deno, cargo-c...

6.5CVSS6.7AI score0.0054EPSS
SaveExploits0
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•17 views

EUVD-2024-2428

Malicious code in bioql PyPI...

7.4CVSS6.3AI score0.00463EPSS
SaveExploits1References5
RedhatCVE
RedhatCVE
•added 2025/02/05 7:52 a.m.•18 views

CVE-2024-41815

Starship is a cross-shell prompt. Starting in version 1.0.0 and prior to version 1.20.0, undocumented and unpredictable shell expansion and/or quoting rules make it easily to accidentally cause shell injection when using custom commands with starship in bash. This issue only affects users with...

7.4CVSS7.2AI score0.00463EPSS
SaveExploits1References1
Chainguard
Chainguard
•added 2024/09/06 7:55 p.m.•11 views

GHSA-M8RP-VV92-46C7 vulnerabilities

Vulnerabilities for packages: cargo-audit, starship, cargo-c...

5.7AI score
SaveExploits0
Chainguard
Chainguard
•added 2024/09/06 1:15 p.m.•24 views

CVE-2024-45405 vulnerabilities

Vulnerabilities for packages: cargo-audit, starship, cargo-c...

6CVSS5.8AI score0.00257EPSS
SaveExploits0
SUSE CVE
SUSE CVE
•added 2024/08/06 2:00 a.m.•9 views

SUSE CVE-2024-41815

Starship is a cross-shell prompt. Starting in version 1.0.0 and prior to version 1.20.0, undocumented and unpredictable shell expansion and/or quoting rules make it easily to accidentally cause shell injection when using custom commands with starship in bash. This issue only affects users with...

7.4CVSS7.3AI score0.00463EPSS
SaveExploits1References3
Github Security Blog
Github Security Blog
•added 2024/07/26 9:24 p.m.•31 views

Starship vulnerable to shell injection via undocumented, unpredictable shell expansion in custom commands

Description Starship is a cross-shell prompt. Starting in version 1.0.0 and prior to version 1.20.0, undocumented and unpredictable shell expansion and/or quoting rules make it easily to accidentally cause shell injection when using custom commands with starship in bash. Version 1.20.0 fixes the...

7.4CVSS6.9AI score0.00463EPSS
SaveExploits1References6Affected Software1
OSV
OSV
•added 2024/07/26 9:24 p.m.•30 views

GHSA-VX24-X4MV-VWR5 Starship vulnerable to shell injection via undocumented, unpredictable shell expansion in custom commands

Description Starship is a cross-shell prompt. Starting in version 1.0.0 and prior to version 1.20.0, undocumented and unpredictable shell expansion and/or quoting rules make it easily to accidentally cause shell injection when using custom commands with starship in bash. Version 1.20.0 fixes the...

7.4CVSS6.8AI score0.00463EPSS
SaveExploits1References6
AlpineLinux
AlpineLinux
•added 2024/07/26 9:15 p.m.•20 views

CVE-2024-41815

Starship is a cross-shell prompt. Starting in version 1.0.0 and prior to version 1.20.0, undocumented and unpredictable shell expansion and/or quoting rules make it easily to accidentally cause shell injection when using custom commands with starship in bash. This issue only affects users with...

7.7AI score0.00463EPSS
SaveExploits1
NVD
NVD
•added 2024/07/26 9:15 p.m.•31 views

CVE-2024-41815

Starship is a cross-shell prompt. Starting in version 1.0.0 and prior to version 1.20.0, undocumented and unpredictable shell expansion and/or quoting rules make it easily to accidentally cause shell injection when using custom commands with starship in bash. This issue only affects users with...

7.4CVSS0.00463EPSS
SaveExploits1References3
Cvelist
Cvelist
•added 2024/07/26 9:01 p.m.•37 views

CVE-2024-41815 Starship vulnerable to shell injection via undocumented, unpredictable shell expansion in custom commands

Starship is a cross-shell prompt. Starting in version 1.0.0 and prior to version 1.20.0, undocumented and unpredictable shell expansion and/or quoting rules make it easily to accidentally cause shell injection when using custom commands with starship in bash. This issue only affects users with...

7.4CVSS0.00463EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
•added 2024/07/26 9:01 p.m.•16 views

CVE-2024-41815 Starship vulnerable to shell injection via undocumented, unpredictable shell expansion in custom commands

Starship is a cross-shell prompt. Starting in version 1.0.0 and prior to version 1.20.0, undocumented and unpredictable shell expansion and/or quoting rules make it easily to accidentally cause shell injection when using custom commands with starship in bash. This issue only affects users with...

7.4CVSS7.5AI score0.00463EPSS
SaveExploits1References3
OSV
OSV
•added 2024/07/26 9:01 p.m.•23 views

CVE-2024-41815 Starship vulnerable to shell injection via undocumented, unpredictable shell expansion in custom commands

Starship is a cross-shell prompt. Starting in version 1.0.0 and prior to version 1.20.0, undocumented and unpredictable shell expansion and/or quoting rules make it easily to accidentally cause shell injection when using custom commands with starship in bash. This issue only affects users with...

7.4CVSS7AI score
SaveExploits0References5
Rows per page
Query Builder