parseusbs vulnerabilities

2 known vulnerabilities in parseusbs from Khyrenz. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.8 High severity

  parseusbs: Improper Neutralization of Special Elements used in an OS Command

  CVE-2026-40030Apr 8, 2026Khyrenz

  parseusbs before 1.9 contains an OS command injection vulnerability where the volume listing path argument (-v flag) is passed unsanitized into an os.popen() shell command with ls, allowing arbitrary command injection via crafted volume path arguments containi

• 7.8 High severity

  parseusbs: Improper Neutralization of Special Elements used in an OS Command

  CVE-2026-40029Apr 8, 2026Khyrenz

  parseusbs before 1.9 contains an OS command injection vulnerability in parseUSBs.py where LNK file paths are passed unsanitized into an os.popen() shell command, allowing arbitrary command execution via crafted .lnk filenames containing shell metacharacters. A