Skip to content
OpenAdvisories

Vendor

CJCOLLIER

2 known vulnerabilities.

Products

Google::Auth 2
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2026-66902

    Google::Auth versions before 0.06 for Perl run a command named in an external_account credentials JSON via an ungated system call

    Google::Auth versions before 0.06 for Perl run a command named in an external_account credentials JSON via an ungated system call. The Pluggable subclass reads credential_source.executable.command from the credentials JSON and runs it as `system($command)`, a…

    CJCOLLIER Google::Auth