4 results · Feed
-
High 8.6
LilyPond before 2.24 allows attackers to bypass the -dsafe protection mechanism via output-def-lookup or output-def-sco…
-
Unscored —
scm/define-stencil-commands.scm in LilyPond through 2.20.0, and 2.21.x through 2.21.4, when -dsafe is used, lacks restr…
-
Unscored —
lilypond-invoke-editor in LilyPond 2.19.80 does not validate strings before launching the program specified by the BROW…
-
Unscored —
lilypond-invoke-editor in LilyPond 2.19.80 does not validate strings before launching the program specified by the BROW…