Vendor
zenstruck
1 known vulnerabilities.
Products
1 result · Clear filters · Feed
-
High 8.6
Limited code execution in zenstruck/collections
zenstruck/collections is a set of helpers for iterating/paginating/filtering collections. Passing _callable strings_ (ie `system`) caused the function to be executed. This would result in a limited subset of specific user input being executed as if it were co…