What is GHSA-86w8-vhw6-q9qq?

GHSA-86w8-vhw6-q9qq is a security advisory published by GitHub Security Advisories with Medium severity. XPixelGroup BasicSR Command Injection

Which CVE IDs does GHSA-86w8-vhw6-q9qq cover?

GHSA-86w8-vhw6-q9qq covers the following CVE IDs: CVE-2024-27763. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-86w8-vhw6-q9qq?

GHSA-86w8-vhw6-q9qq has a CVSS v3 base score of 5.3, published by GitHub Security Advisories.

Which products are affected by GHSA-86w8-vhw6-q9qq?

GHSA-86w8-vhw6-q9qq affects 1 product, including: pip/basicsr:\u003c= 1.4.2.

GHSA-86w8-vhw6-q9qqMediumCVSS 5.3

XPixelGroup BasicSR Command Injection

Vendor

GitHub Security Advisories

Published

March 12, 2025

Last Modified

March 13, 2025

🔗 CVE IDs covered (1)

CVE-2024-27763 →

📋 Description

XPixelGroup BasicSR through 1.4.2 might locally allow code execution in contrived situations where "scontrol show hostname" is executed in the presence of a crafted SLURM_NODELIST environment variable.

🎯 Affected products1

pip/basicsr:<= 1.4.2

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2024-27763
https://gist.github.com/aydinnyunus/40e1d8a3b529261ae654ff4891f1e192
https://github.com/XPixelGroup/BasicSR/blob/master/basicsr/utils/dist_util.py#L44
https://github.com/advisories/GHSA-86w8-vhw6-q9qq