SUSE CVE-2023-27986

emacsclient-mail.desktop in Emacs 28.1 through 28.2 is vulnerable to Emacs Lisp code injections through a crafted mailto: URI with unescaped double-quote characters. It is fixed in 29.0.90...

GNU Emacs 操作系统命令注入漏洞

GNU Emacs is a family of text editors in the American GNU community. An operating system command injection vulnerability exists in GNU Emacs versions 28.1 through 28.2. An attacker exploits the vulnerability to perform shell command injection via a specially crafted URL...