Cookiecutter vulnerabilities
We track 1 vulnerability in Cookiecutter products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on June 8, 2022.
1vulnerabilities
1critical
0high
0exploited
9.8average CVSS score
Latest Cookiecutter vulnerabilities
- 9.8 Critical severity
cookiecutter: Improper Neutralization of Special Elements used in an OS Command
The package cookiecutter before 2.1.1 are vulnerable to Command Injection via hg argument injection. When calling the cookiecutter function from Python code with the checkout parameter, it is passed to the hg checkout command in a way that additional flags can