Filtered by vendor Swiss Federal Office Of Information Technology, Systems And Telecommunication
Subscriptions
Total
1 CVE
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2026-16022 | 1 Swiss Federal Office Of Information Technology, Systems And Telecommunication | 1 Oblique/cli | 2026-08-07 | 7.8 High |
| @oblique/cli 15.4.0 contains an OS command injection vulnerability in the project creation functionality. The CLI constructs shell commands through string concatenation and executes them with execSync(). A user-controlled project-name argument is inserted into the shell command without proper neutralization, allowing shell metacharacters to execute additional operating-system commands when the CLI is invoked with a crafted project name. | ||||
Page 1 of 1.