Skip to content
OpenAdvisories

Package · Go

github.com/Masterminds/vcs

1 known vulnerabilities.

1 result · Feed

  • High 8.1

    Command Injection

    The package github.com/masterminds/vcs before 1.13.3 are vulnerable to Command Injection via argument injection. When hg is executed, argument strings are passed to hg in a way that additional flags can be set. The additional flags can be used to perform a co…