Cookiecutter Project

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Cookiecutter Project records in CISA KEV

No Cookiecutter Project vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record in Cookiecutter · all components

TI-2022-08023 CVE-2022-24065 · GHSA-f4q6-9qm4-h8j4

MEDIUM 49

The package cookiecutter before 2.1.1 are vulnerable to Command Injection via hg argument injection.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.04201 Published 2022-06-03 Fixed in 2.1.1 CWE-78