{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0"}],"component":"github.com/OliveTin/OliveTin","cve_ids":["CVE-2025-50946"],"ecosystem":"Go","epss":0.013,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-p3qf-84rg-jxfc","id":"tcs_01M5KG9V71GTF74QERV9C7J7FF","modified_at":"2026-03-03T04:56:49.361401Z","published_at":"2025-08-18T13:17:23Z","references":["https://osv.dev/vulnerability/GO-2025-3886","https://github.com/advisories/GHSA-p3qf-84rg-jxfc","https://nvd.nist.gov/vuln/detail/CVE-2025-50946","https://github.com/OliveTin/OliveTin/blob/8c073bf45fca6c6eda4e8a9feb182433277343ee/service/internal/executor/arguments.go#L211","https://github.com/chrisWalker11/Cves/blob/main/CVE-2025-50946/CVE-2025-50946.md"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"GO-2025-3886","url":"https://osv.dev/vulnerability/GO-2025-3886"},{"source":"nvd","source_id":"CVE-2025-50946","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-50946"}],"summary":"OliveTin OS Command Injection vulnerability in github.com/OliveTin/OliveTin"}