crates.io/grep-cli CVE-2021-3013: critical 9.8, EPSS 1.93%

`grep-cli` may run arbitrary executables on Windows

Action: Upgrade grep-cli to 0.1.6 or later.

cargo update -p grep-cli --precise 0.1.6

Affected

Fixed versions

Sources

• osv: RUSTSEC-2021-0071
• https://crates.io/crates/grep-cli
• https://rustsec.org/advisories/RUSTSEC-2021-0071.html
• https://github.com/BurntSushi/ripgrep/issues/1773

CVE-2021-3013 · published 2021-06-12T12:00:00Z · modified 2023-11-08T04:05:44.745722Z · JSON