libvcs vulnerabilities

1 known vulnerability in libvcs from Libvcs. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  libvcs: Improper Neutralization of Argument Delimiters in a Command

  CVE-2022-21187Mar 14, 2022LibvcsEPSS 3.62%

  The package libvcs before 0.11.1 are vulnerable to Command Injection via argument injection. When calling the update_repo function (when using hg), the url parameter is passed to the hg clone command. By injecting some hg options it was possible to get arbitra