Skip to content
OpenAdvisories

Package · Ubuntu

fish

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Low 3.9
    CVE-2023-49284

    Command substitution output can trigger shell expansion in fish shell

    fish is a smart and user-friendly command line shell for macOS, Linux, and the rest of the family. fish shell uses certain Unicode non-characters internally for marking wildcards and expansions. It will incorrectly allow these markers to be read on command su…

    fish-shell fish-shell fish fish Debian Ubuntu
  • High 7.8
    CVE-2022-20001

    Injection in fish

    fish is a command line shell. fish version 3.1.0 through version 3.3.1 is vulnerable to arbitrary code execution. git repositories can contain per-repository configuration that change the behavior of git, including running arbitrary commands. When using the d…

    fish-shell fish-shell fish fish Debian Ubuntu Alpine