Detected non-static command inside Command. Audit the input to 'exec.Command'. If unverified user data can reach this call site, this is a code injection vulnerability. A malicious actor can inject a malicious script to execute arbitrary code.

[get-famed[bot]]

🦸‍♀️ Famed Scanner

📝 Description

Detected non-static command inside Command. Audit the input to 'exec.Command'. If unverified user data can reach this call site, this is a code injection vulnerability. A malicious actor can inject a malicious script to execute arbitrary code.

📁 Related files

exec.go

This issue was created by famed 🤖

[get-famed[bot]]

🤖 Assignees for issue Detected non-static command inside Command. Audit the input to 'exec.Command'. If unverified user data can reach this call site, this is a code injection vulnerability. A malicious actor can inject a malicious script to execute arbitrary code. #21 are now eligible to Get Famed.

❌ Add assignees to track contribution times of the issue 🦸‍♀️🦹️ ❌ Add a single severity (CVSS) label to compute the score 🏷️️

Happy hacking! 🦾💙❤️️