Lingdojo vulnerabilities
We track 2 vulnerabilities in Lingdojo products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on June 11, 2026.
2vulnerabilities
0critical
2high
0exploited
7.3average CVSS score
Latest Lingdojo vulnerabilities
- 7.3 High severity
kana-dojo: Improper Neutralization of Special Elements used in an OS Command
KanaDojo contains a command injection vulnerability that allows an attacker with pull request access to execute arbitrary shell commands by inserting shell metacharacters into the version or changes fields of patchNotesData.json, which are interpolated unsanit
- 7.3 High severity
kana-dojo: Protection Mechanism Failure
KanaDojo before 0.1.18 contains a sandbox escape vulnerability that allows an attacker to execute arbitrary code by exploiting the explicit passing of the global require function into a Node.js vm.runInNewContext() sandbox context in the issue-auto-respond.yml