CJCOLLIER vulnerabilities
We track 2 vulnerabilities in CJCOLLIER products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on August 4, 2026.
2vulnerabilities
1critical
1high
0exploited
8.7average CVSS score
Latest CJCOLLIER vulnerabilities
- 9.8 Critical severity
Google::Auth: Improper Neutralization of Special Elements used in an OS Command
Google::Auth versions before 0.06 for Perl run a command named in an external_account credentials JSON via an ungated system call. The Pluggable subclass reads credential_source.executable.command from the credentials JSON and runs it as `system($command)`, a
- 7.5 High severity
Google::Auth: Insertion of Sensitive Information Into Sent Data
Google::Auth versions before 0.09 for Perl allow server side request forgery and credential exfiltration via unvalidated URLs taken from the credentials JSON. The URLs the library requests are read from the credentials JSON, and their hosts were not checked ag