cli vulnerabilities

2 known vulnerabilities in cli from Uniget-org. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.4 High severity

  cli: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2026-55062Sep 17, 2026Uniget-org

  uniget is a universal installer and updater for (container) tools. Prior to 0.27.6, the hooks edit command in cmd/uniget/hooks.go concatenates an unvalidated hook filename with the selected hooks directory, allowing parent-directory components to escape that d

• 7.8 High severity

  cli: Improper Neutralization of Special Elements used in an OS Command

  CVE-2026-45152May 27, 2026Uniget-org

  uniget is a universal installer and updater for (container) tools. Prior to 0.27.1, a command injection vulnerability exists in uniget due to unsafe execution of the check field from metadata files using /bin/bash -c. Because the check field is loaded directly