Skip to content
OpenAdvisories

Package · Go

go.mozilla.org/sops

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Low —
    GHSA-x5c7-x7m2-rhmf

    Local directory executable lookup in sops (Windows-only)

    ### Impact Windows users using the sops direct editor option (`sops file.yaml`) can have a local executable named either `vi`, `vim`, or `nano` executed if running sops from `cmd.exe` This attack is only viable if an attacker is able to place a malicious bina…

    go.mozilla.org/sops go.mozilla.org/sops/v3 Go