Vcs Project vulnerabilities
We track 1 vulnerability in Vcs Project products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on April 1, 2022.
1vulnerabilities
1critical
0high
0exploited
9.8average CVSS score
Latest Vcs Project vulnerabilities
- 9.8 Critical severity
github.com/Masterminds/vcs: Improper Neutralization of Argument Delimiters in a Command
The package github.com/masterminds/vcs before 1.13.3 are vulnerable to Command Injection via argument injection. When hg is executed, argument strings are passed to hg in a way that additional flags can be set. The additional flags can be used to perform a com