Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Vendor: alastairlundy Clear all filters
TI-2026-64647 CVE-2026-100369 · GHSA-j73w-8hfr-4gc9

CliInvoke: Argument Injection in Extensibility Runner Factory

Priority LOW 38

CliInvoke and its formerly named `AlastairLundy.CliInvoke` package are .NET libraries for invoking command-line programs and wrapping executable processes.

CVSS 3.1HIGH 8.4 Local No auth No interaction EPSS 0.00359 Published 2026-09-25 Fixed in 2.8.5, 2.9.4 +3 CWE-88
TI-2026-64646 CVE-2026-100368 · GHSA-wrvw-254r-wpmv

CliInvoke.Specializations: Command injection in PowerShell and Cmd shell wrappers

Priority LOW 39

CliInvoke is a .NET library for invoking command-line programs, and its `CliInvoke.Specializations` packages provide specialized wrappers for shells such as PowerShell and Windows Command Prompt.

CVSS 3.1HIGH 8.4 Local No auth No interaction EPSS 0.00581 Published 2026-09-25 Fixed in 2.8.5, 2.9.4 +3 CWE-78