Skip to content
OpenAdvisories

Package · crates.io

tracexec

1 known vulnerabilities.

1 result · Feed

  • Low —

    tracexec has `env` command argument injection via environment variables starting with dash in traced exec events

    ### Impact For tracexec's command line reconstruction feature, when a traced process executes another process with a environment variable where the key starts with a dash, tracexec incorrectly shows its commandline where such environment variables could cause…