~ / search / GHSA-p24j-h477-76q3

GHSA-p24j-h477-76q3

Uncontrolled Search Path Element in sharkdp/bat

Source: GitHub Advisory Database (reviewed) High CVE-2021-36753

Packages

EcosystemPackageAffectedFixed in
crates.io bat < 0.18.2 0.18.2

Details

As written in the advisory (Markdown source, shown as plain text).

bat on windows before 0.18.2 executes programs named less.exe from the current working directory. This can lead to unintended code execution.

References

External links from the advisory. They lead to third-party sites.