tocsin

CVE-2026-100368

2 advisories.

NuGet/CliInvoke.Specializations CVE-2026-100368: high 8.4

CliInvoke.Specializations has command injection in PowerShell and Cmd shell wrappers

Action: Upgrade CliInvoke.Specializations to 2.8.5 (2.8.x), 2.9.4 (2.9.x), 2.10.5 (2.10.x) or 3.0.0-beta.1 (3.0.x) or later.

Affected

introducedfixedlast affected
2.2.02.8.5-
2.9.02.9.4-
2.10.02.10.5-
3.0.0-alpha.13.0.0-beta.1-
3.0.0-alpha.83.0.0-beta.1-

Fixed versions

2.8.52.9.42.10.53.0.0-beta.1

Sources

CVE-2026-100368 · published · modified · JSON

NuGet/AlastairLundy.CliInvoke.Specializations CVE-2026-100368: high 8.4

CliInvoke.Specializations has command injection in PowerShell and Cmd shell wrappers

Action: Upgrade AlastairLundy.CliInvoke.Specializations to 2.0.2 or later.

Affected

introducedfixedlast affected
1.0.0-rc.12.0.2-

Fixed versions

2.0.2

Sources

CVE-2026-100368 · published · modified · JSON