Skip to content
OpenAdvisories

Vendor

dependabot

1 known vulnerabilities.

Products

dependabot-core 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.7
    CVE-2020-26222

    Remote code execution in dependabot-core

    Dependabot is a set of packages for automated dependency management for Ruby, JavaScript, Python, PHP, Elixir, Rust, Java, .NET, Elm and Go. In Dependabot-Core from version 0.119.0.beta1 before version 0.125.1, there is a remote code execution vulnerability i…

    dependabot dependabot-core dependabot-common dependabot-omnibus RubyGems