Skip to content
OpenAdvisories

Package · Go

github.com/mutagen-io/mutagen

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Low 3.0
    CVE-2023-30844

    Mutagen list and monitor operations do not neutralize control characters in text controlled by remote endpoints

    Mutagen provides real-time file synchronization and flexible network forwarding for developers. Prior to versions 0.16.6 and 0.17.1 in `mutagen` and prior to version 0.17.1 in `mutagen-compose`, Mutagen `list` and `monitor` commands are susceptible to control…

    mutagen-io mutagen github.com/mutagen-io/mutagen github.com/mutagen-io/mutagen-compose Go
  • Low —
    GHSA-fwj4-72fm-c93g

    Under-validated ComSpec and cmd.exe resolution in Mutagen projects

    ### Impact Mutagen projects offer shell-based execution functionality. On Windows, the shell is resolved using the standard `%ComSpec%` mechanism, with a fallback to a `%PATH%`-based search for `cmd.exe`. While this is the standard practice on Windows systems…

    github.com/mutagen-io/mutagen Go