Skip to content
OpenAdvisories

Product · snyk

sweater-comb

1 known vulnerabilities.

1 result · Clear filters · Feed

  • High 8.0

    Synk Sweater Comb < 3.8.8 Command Injection via .vervet.yaml Branch Name

    Synk Sweater Comb before 3.8.8 contains a command injection vulnerability that allows an attacker who controls the .vervet.yaml configuration file to execute arbitrary OS commands by injecting malicious input into the linters.<key>.optic-ci.original branch na…