org.sonarsource.scm.git:sonar-scm-git-plugin (1.3.0.869), org.sonarsource.scm.svn:sonar-scm-svn-plugin (1.6.0.860) +12 more potentially affected by CVE-2018-19413 via org.sonarsource.sonarqube:sonar-plugin-api (6.6-rc1)

org.sonarsource.sonarqube:sonar-plugin-api MAVEN version 6.6-rc1 is affected by a known vulnerability. The following packages have a transitive dependency on org.sonarsource.sonarqube:sonar-plugin-api and may be impacted: - org.sonarsource.scm.git:sonar-scm-git-plugin 1.3.0.869 -...

OhMyZSH operating system command injection vulnerability

ohmyzsh is an open source, community-driven framework for managing your zsh configuration. An operating system command injection vulnerability exists in ohmyzsh, which stems from the fact that ohmyzsh's omzurldecode function uses an eval to decode input, which can be used to inject commands. This...