Powerline Gitstatus Project Powerline Gitstatus vulnerabilities

1 known vulnerability affecting powerline_gitstatus_project/powerline_gitstatus.

Total CVEs

1

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

HIGH1

Vulnerabilities

Page 1 of 1

CVE-2022-42906HIGHCVSS 7.8fixed in 1.3.22022-10-13

CVE-2022-42906 [HIGH] CVE-2022-42906: powerline-gitstatus (aka Powerline Gitstatus) before 1.3.2 allows arbitrary code execution. git repo powerline-gitstatus (aka Powerline Gitstatus) before 1.3.2 allows arbitrary code execution. git repositories can contain per-repository configuration that changes the behavior of git, including running arbitrary commands. When using powerline-gitstatus, changing to a directory automatically runs git commands in order to display information about the current r