blamer vulnerabilities

1 known vulnerability in blamer from Blamer. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.1 Critical severity

  blamer: Improper Neutralization of Argument Delimiters in a Command

  CVE-2023-26143Sep 19, 2023BlamerEPSS 1.12%

  Versions of the package blamer before 1.0.4 are vulnerable to Arbitrary Argument Injection via the blameByFile() API. The library does not sanitize for user input or validate the given file path conforms to a specific schema, nor does it properly pass command-