Skip to content
OpenAdvisories

Package · Go

github.com/github/gh-ost

1 known vulnerabilities.

1 result · Feed

  • Medium 6.8

    Command injection in gh-ost

    gh-ost is a triggerless online schema migration solution for MySQL. Versions prior to 1.1.3 are subject to an arbitrary file read vulnerability. The attacker must have access to the target host or trick an administrator into executing a malicious gh-ost comma…