Shama vulnerabilities
We track 1 vulnerability in Shama products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on November 29, 2025.
1vulnerabilities
1critical
0high
0exploited
9.8average CVSS score
Latest Shama vulnerabilities
- 9.8 Critical severity
willitmerge: Improper Neutralization of Special Elements used in a Command
willitmerge is a command line tool to check if pull requests are mergeable. In versions 0.2.1 and prior, there is a command Injection vulnerability in willitmerge. The vulnerability manifests in this package due to the use of insecure child process execution A