Skip to content
OpenAdvisories

Package · crates.io

starship

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High 7.4
    CVE-2024-41815

    Starship vulnerable to shell injection via undocumented, unpredictable shell expansion in custom commands

    Starship is a cross-shell prompt. Starting in version 1.0.0 and prior to version 1.20.0, undocumented and unpredictable shell expansion and/or quoting rules make it easily to accidentally cause shell injection when using custom commands with starship in bash.…

    starship starship starship crates.io