CVE-2024-58266
The shlex crate before 1.2.1 for Rust allows unquoted and unescaped instances of the { and \xa0 characters, which may facilitate command injection.
Résumé
Multiple issues involving quote API
Description d'origine
La description telle que publiée par la source (souvent en anglais).
The shlex crate before 1.2.1 for Rust allows unquoted and unescaped instances of the { and \xa0 characters, which may facilitate command injection.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Paquets affectés
crates.io
shlex
[{"type":"SEMVER","events":[{"introduced":"0.0.0-0"},{"fixed":"1.3.0"}]}]
État des correctifs par distribution
Paquets corrigés publiés par chaque distribution pour cette CVE
- Debian DEBIAN-CVE-2024-58266 rust-shlex
- Ubuntu UBUNTU-CVE-2024-58266 rust-shlex
Références
- advisory rustsec.org
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- web crates.io
- web github.com