~ / search / GHSA-p3qf-84rg-jxfc

GHSA-p3qf-84rg-jxfc

OliveTin OS Command Injection vulnerability

Source: GitHub Advisory Database (reviewed) High CVE-2025-50946

Packages

EcosystemPackageAffectedFixed in
Go github.com/OliveTin/OliveTin <= 0.0.0-20250502155356-8c073bf45fca no fix listed

Details

As written in the advisory (Markdown source, shown as plain text).

OS Command Injection in Olivetin 2025.4.22 Custom Themes via the ParseRequestURI function in service/internal/executor/arguments.go.

References

External links from the advisory. They lead to third-party sites.