Libvcs vulnerabilities
We track 1 vulnerability in Libvcs products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on March 14, 2022.
1vulnerabilities
1critical
0high
0exploited
9.8average CVSS score
Latest Libvcs vulnerabilities
- 9.8 Critical severity
libvcs: Improper Neutralization of Argument Delimiters in a Command
The package libvcs before 0.11.1 are vulnerable to Command Injection via argument injection. When calling the update_repo function (when using hg), the url parameter is passed to the hg clone command. By injecting some hg options it was possible to get arbitra