wenxian vulnerabilities

1 known vulnerability in wenxian from Njzjz. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  wenxian: Improper Neutralization of Special Elements used in a Command

  CVE-2026-34243Mar 31, 2026NjzjzEPSS 2.21%

  wenxian is a tool to generate BIBTEX files from given identifiers (DOI, PMID, arXiv ID, or paper title). In versions 0.3.1 and prior, a GitHub Actions workflow uses untrusted user input from issue_comment.body directly inside a shell command, allowing potentia