← Back

Bytedeco

bytedeco

1 CVE • 1 product

Products (1)

Click to collapse
Toggle
Javacpp Presets
javacpp_presets
1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2023-34112
1Bytedeco
1Javacpp Presets
Nov 21, 2024
Jun 9, 2023
N/A· v4
8.8 HIGH· v3
N/A· v2
JavaCPP Presets is a project providing Java distributions of native C++ libraries. All the actions in the `bytedeco/javacpp-presets` use the `github.event.head_commit.message​` parameter in an insecure way. For example,...Show more
JavaCPP Presets is a project providing Java distributions of native C++ libraries. All the actions in the `bytedeco/javacpp-presets` use the `github.event.head_commit.message​` parameter in an insecure way. For example, the commit message is used in a run statement - resulting in a command injection vulnerability due to string interpolation. No exploitation has been reported. This issue has been addressed in version 1.5.9. Users of JavaCPP Presets are advised to upgrade as a precaution.Show less