Vulnerabilities

TI-2023-11367 CVE-2023-26143 · GHSA-6f9p-g466-f8v8

Versions of the package blamer before 1.0.4 are vulnerable to Arbitrary Argument…

HIGH 78

Versions of the package blamer before 1.0.4 are vulnerable to Arbitrary Argument Injection via the blameByFile() API.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.01122 Published 2023-09-19 Fixed in 1.0.4 CWE-88

TI-2020-06555 CVE-2020-8137 · GHSA-7vm7-j8p7-h346

MEDIUM 49

Code injection vulnerability in blamer 1.0.0 and earlier may result in remote code execution when the input can be controlled by an attacker.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.04268 Published 2020-03-20 Fixed in 1.0.1 CWE-94

TI-2019-08072 CVE-2019-10807 · GHSA-8cxp-cjm8-fj36

MEDIUM 47

Blamer versions prior to 1.0.1 allows execution of arbitrary commands.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0242 Published 2020-03-10 Fixed in 1.0.1 CWE-78