sherlock vulnerabilities

1 known vulnerability in sherlock from Sherlock-project. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.3 Critical severity

  sherlock: Improper Neutralization of Special Elements used in an OS Command

  CVE-2026-44590May 27, 2026Sherlock-projectEPSS 1.14%

  Sherlock hunts down social media accounts by username across social networks. Prior to 0.16.1, the GitHub Actions workflow validate_modified_targets.yml is vulnerable to command injection via the pull_request_target trigger. Any GitHub user can execute arbitra