Skip to content
OpenAdvisories

Package · Go

gitlab.com/uniget-org/cli

4 known vulnerabilities.

1 result · Clear filters · Feed

  • Low 1.0

    uniget: EDITOR Command Injection in uniget CLI

    uniget is a universal installer and updater for (container) tools. Prior to 0.27.6, the hooks edit command in cmd/uniget/hooks.go parses UNIGET_EDITOR or EDITOR with strings.Split(editor, " ") and passes every space-delimited suffix as an argument to the sele…