github.com/Masterminds/vcs vulnerabilities
We track 1 vulnerability in github.com/Masterminds/vcs products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on April 1, 2022.
1vulnerabilities
1critical
0high
0exploited
9.8average CVSS score
Latest github.com/Masterminds/vcs vulnerabilities
- 9.8 Critical severity
github.com/Masterminds/vcs: Improper Neutralization of Argument Delimiters in a Command
The package github.com/masterminds/vcs before 1.13.3 are vulnerable to Command Injection via argument injection. When hg is executed, argument strings are passed to hg in a way that additional flags can be set. The additional flags can be used to perform a com