CVE-2021-28955
1 advisory.
Go/github.com/MichaelMure/git-bug CVE-2021-28955: critical 9.8, EPSS 1.72%
Arbitrary code execution due to an uncontrolled search path for the git binary
Action: Upgrade github.com/MichaelMure/git-bug to 0.7.2 or later.
go get github.com/MichaelMure/git-bug@v0.7.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.7.2 | - |
Fixed versions
| 0.7.2 |
Sources
- osv: GHSA-m898-h4pm-pqfr
- https://github.com/git-bug/git-bug/security/advisories/GHSA-m898-h4pm-pqfr
- https://nvd.nist.gov/vuln/detail/CVE-2021-28955
- https://github.com/MichaelMure/git-bug/pull/604
- https://github.com/git-bug/git-bug
- https://vuln.ryotak.me/advisories/18
CVE-2021-28955 · published · modified · JSON