Description
Ops CLI version 2.0.4 (and earlier) is affected by a Deserialization of Untrusted Data vulnerability to achieve arbitrary code execution when the checkout_repo function is called on a maliciously crafted file. An attacker can leverage this to execute arbitrary code on the victim machine.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Adobe | Ops-CLI | unspecified – ≤ 2.0.4, unspecified – ≤ None | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| PyPI | ops-cli | < 2.0.5 | 2.0.5 | GHSA-x23q-4j9j-9cxw |