Skip to content
OpenAdvisories

Product · uniget-org

cli

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.4
    CVE-2026-55062

    uniget: Path Traversal in Hook Files - Directory Escape Vulnerability

    uniget is a universal installer and updater for (container) tools. Prior to 0.27.6, the hooks edit command in cmd/uniget/hooks.go concatenates an unvalidated hook filename with the selected hooks directory, allowing parent-directory components to escape that …

    uniget-org cli gitlab.com/uniget-org/cli Go
  • High 7.8
    CVE-2026-45152

    uniget: Command Injection in tool.Check Leading to Arbitrary Code Execution

    uniget is a universal installer and updater for (container) tools. Prior to 0.27.1, a command injection vulnerability exists in uniget due to unsafe execution of the check field from metadata files using /bin/bash -c. Because the check field is loaded directl…

    uniget-org cli gitlab.com/uniget-org/cli Go