High · 7.8 CVE-2021-3934 EUVD-2021-27148GHSA-gv4m-8hpx-hfqf

OS Command Injection in ohmyzsh/ohmyzsh

Published Nov 12, 2021 · Updated Aug 3, 2024 · Assigned by @huntrdev

Description

ohmyzsh is vulnerable to Improper Neutralization of Special Elements used in an OS Command

Vendor	Product	Affected	Fixed
ohmyzsh	ohmyzsh/ohmyzsh	unspecified – < 6cb41b70a6d04301fd50cd5862ecd705ba226c0e	6cb41b70a6d04301fd50cd5862ecd705ba226c0e