fish

7 results · Feed

• Low 3.9
  CVE-2023-49284

  Command substitution output can trigger shell expansion in fish shell

  fish is a smart and user-friendly command line shell for macOS, Linux, and the rest of the family. fish shell uses certain Unicode non-characters internally for marking wildcards and expansions. It will incorrectly allow these markers to be read on command su…

  fish-shell fish-shell fish fish Debian Ubuntu
  Dec 4, 2023
• High 7.8
  CVE-2022-20001

  Injection in fish

  fish is a command line shell. fish version 3.1.0 through version 3.3.1 is vulnerable to arbitrary code execution. git repositories can contain per-repository configuration that change the behavior of git, including running arbitrary commands. When using the d…

  fish-shell fish-shell fish fish Debian Ubuntu Alpine
  Mar 14, 2022
• Unscored —
  CVE-2014-2906

  The psub function in fish (aka fish-shell) 1.16.0 before 2.1.1 does not properly create temporary files, which allows l…

  fish Debian
  Jan 28, 2020
• Unscored —
  CVE-2014-3856

  The funced function in fish (aka fish-shell) 1.23.0 before 2.1.1 does not properly create temporary files, which allows…

  fish Debian
  Jan 28, 2020
• Unscored —
  CVE-2014-2914

  fish (aka fish-shell) 2.0.0 before 2.1.1 does not restrict access to the configuration service (aka fish_config), which…

  fish Debian
  Jan 28, 2020
• Unscored —
  CVE-2014-3219

  fish before 2.1.1 allows local users to write to arbitrary files via a symlink attack on (1) /tmp/fishd.log.%s, (2) /tm…

  fish Debian
  Feb 9, 2018
• Unscored —
  CVE-2014-2905

  fish (aka fish-shell) 1.16.0 before 2.1.1 does not properly check the credentials, which allows local users to gain pri…

  fish Debian
  May 2, 2014