crates.io/zeptoclaw: high 7.5
zeptoclaw has Android device shell blocklist bypass via argument permutation
Action: Upgrade zeptoclaw to 0.6.2 or later.
cargo update -p zeptoclaw --precise 0.6.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.6.2 | - |
Fixed versions
| 0.6.2 |
Sources
- osv: GHSA-hhjv-jq77-cmvx
- https://github.com/qhkm/zeptoclaw/security/advisories/GHSA-hhjv-jq77-cmvx
- https://github.com/qhkm/zeptoclaw/commit/68916c3e4f3af107f11940b27854fc7ef517058b
- https://github.com/qhkm/zeptoclaw
- https://github.com/qhkm/zeptoclaw/blob/fe2ef07cfec5bb46b42cdd65f52b9230c03e9270/src/tools/android/actions.rs#L413-L424
published · modified · JSON