~ / search / GHSA-86w8-vhw6-q9qq

GHSA-86w8-vhw6-q9qq

XPixelGroup BasicSR Command Injection

Source: GitHub Advisory Database (reviewed) Moderate CVE-2024-27763

Packages

EcosystemPackageAffectedFixed in
PyPI basicsr <= 1.4.2 no fix listed

Details

As written in the advisory (Markdown source, shown as plain text).

XPixelGroup BasicSR through 1.4.2 might locally allow code execution in contrived situations where "scontrol show hostname" is executed in the presence of a crafted SLURM_NODELIST environment variable.

References

External links from the advisory. They lead to third-party sites.