Description
An issue was discovered in vesoft NebulaGraph through 3.8.0. It allows shell command injection.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Go | github.com/vesoft-inc/nebula | all versions | — | GO-2024-3156 |
Critical · 9.8
CVE-2024-47219
EUVD-2024-42314GHSA-2gm9-phpp-rvm3GO-2024-3156
CVE-2024-47219 in github.com/vesoft-inc/nebula
Published Sep 21, 2024 · Updated Mar 14, 2025 · Assigned by mitre