Uniget-org vulnerabilities
We track 2 vulnerabilities in Uniget-org products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on September 17, 2026.
2vulnerabilities
0critical
2high
0exploited
8.1average CVSS score
Latest Uniget-org vulnerabilities
- 8.4 High severity
cli: Improper Limitation of a Pathname to a Restricted Directory
uniget is a universal installer and updater for (container) tools. Prior to 0.27.6, the hooks edit command in cmd/uniget/hooks.go concatenates an unvalidated hook filename with the selected hooks directory, allowing parent-directory components to escape that d
- 7.8 High severity
cli: Improper Neutralization of Special Elements used in an OS Command
uniget is a universal installer and updater for (container) tools. Prior to 0.27.1, a command injection vulnerability exists in uniget due to unsafe execution of the check field from metadata files using /bin/bash -c. Because the check field is loaded directly