High · 7.8 CVE-2021-36753 EUVD-2021-1810GHSA-p24j-h477-76q3RUSTSEC-2021-0106

Uncontrolled Search Path Element in sharkdp/bat

Published Jul 15, 2021 · Updated Aug 4, 2024 · Assigned by mitre

Description

sharkdp BAT before 0.18.2 executes less.exe from the current working directory.

Ecosystem	Package	Affected	Fixed	Record
crates.io	bat	< 0.18.2	0.18.2	GHSA-p24j-h477-76q3
crates.io	bat	>= 0.0.0-0, < 0.18.2	0.18.2	RUSTSEC-2021-0106

OSV:GHSA	v3.1	7.8
OSV:RUSTSEC	v3.1	7.8