Arbitrary Argument Injection

Overview Affected versions of this package are vulnerable to Arbitrary Argument Injection due to the hook editor handling in cmd/uniget/hooks.go. An attacker can execute arbitrary commands by setting EDITOR or UNIGETEDITOR to a value containing shell metacharacters and then invoking the hook...

PT-2026-80465

uniget CLI has an EDITOR Command Injection in gitlab.com/uniget-org/cli...

CVE-2026-55062

creationtimestamp| type| source ---|---|--- 2026-08-17 20:35:09+00:00| published-proof-of-concept| https://github.com/uniget-org/cli/security/advisories/GHSA-m6jg-wr9m-cg2f...