scancode.io vulnerabilities

1 known vulnerability in scancode.io from nexB. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  scancode.io: Improper Neutralization of Special Elements used in a Command

  CVE-2023-39523Aug 7, 2023nexBEPSS 2.92%

  ScanCode.io is a server to script and automate software composition analysis with ScanPipe pipelines. Prior to version 32.5.1, the software has a possible command injection vulnerability in the docker fetch process as it allows to append malicious commands in