Sherlock-project vulnerabilities
We track 1 vulnerability in Sherlock-project products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on May 27, 2026.
1vulnerabilities
1critical
0high
0exploited
9.3average CVSS score
Latest Sherlock-project vulnerabilities
- 9.3 Critical severity
sherlock: Improper Neutralization of Special Elements used in an OS Command
Sherlock hunts down social media accounts by username across social networks. Prior to 0.16.1, the GitHub Actions workflow validate_modified_targets.yml is vulnerable to command injection via the pull_request_target trigger. Any GitHub user can execute arbitra