Vcs Project

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Vcs Project records in CISA KEV

No Vcs Project vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record in Vcs · all components

TI-2022-05626 CVE-2022-21235 · GHSA-6635-c626-vj4r

MEDIUM 45

The package github.com/masterminds/vcs before 1.13.3 are vulnerable to Command Injection via argument injection.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01585 Published 2022-04-01 Partial fix · 1.13.3, 1.13.2 CWE-88