Skip to content
OpenAdvisories

Package · Go

github.com/elves/elvish

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.0
    CVE-2021-41088

    Remote code execution via the web UI backend of Elvish

    Elvish is a programming language and interactive shell, combined into one package. In versions prior to 0.14.0 Elvish's web UI backend (started by `elvish -web`) hosts an endpoint that allows executing the code sent from the web UI. The backend does not check…

    elves elvish elvish github.com/elves/elvish Debian Ubuntu Go