← Back

Libvcs Project

libvcs_project

1 CVE • 1 product

Products (1)

Click to collapse
Toggle
Libvcs
libvcs
1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2022-21187
1Libvcs Project
1Libvcs
Jun 17, 2026
Mar 14, 2022
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
The package libvcs before 0.11.1 are vulnerable to Command Injection via argument injection. When calling the update_repo function (when using hg), the url parameter is passed to the hg clone command. By injecting some h...Show more
The package libvcs before 0.11.1 are vulnerable to Command Injection via argument injection. When calling the update_repo function (when using hg), the url parameter is passed to the hg clone command. By injecting some hg options it was possible to get arbitrary command execution.Show less