Skip to content
OpenAdvisories

Vendor

wummel

3 known vulnerabilities.

Products

patool 3
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.8
    CVE-2026-106057

    patool before 4.0.6 OS Command Injection on Windows via shell_quote_nt

    patool before 4.0.6 contains an OS command injection vulnerability on Windows because shell_quote_nt fails to escape cmd.exe metacharacters or embedded double quotes in archive filenames. Attackers can supply crafted filenames like report&calc.gz for single-f…

    wummel patool patool Ubuntu