What is GHSA-87cj-px37-rc3x?

GHSA-87cj-px37-rc3x is a security advisory published by GitHub Security Advisories with High severity. OS Command Injection in bikeshed

Which CVE IDs does GHSA-87cj-px37-rc3x cover?

GHSA-87cj-px37-rc3x covers the following CVE IDs: CVE-2021-23422. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-87cj-px37-rc3x?

GHSA-87cj-px37-rc3x has a CVSS v3 base score of 7.8, published by GitHub Security Advisories.

Which products are affected by GHSA-87cj-px37-rc3x?

GHSA-87cj-px37-rc3x affects 1 product, including: pip/bikeshed:\u003c 3.0.0.

GHSA-87cj-px37-rc3xHighCVSS 7.8

OS Command Injection in bikeshed

Vendor

GitHub Security Advisories

Published

August 30, 2021

Last Modified

September 4, 2024

🔗 CVE IDs covered (1)

CVE-2021-23422 →

📋 Description

This affects the package bikeshed before 3.0.0. This can occur when an untrusted source file containing Inline Tag Command metadata is processed. When an arbitrary OS command is executed, the command output would be included in the HTML output.

🎯 Affected products1

pip/bikeshed:< 3.0.0

🔗 References (5)

https://nvd.nist.gov/vuln/detail/CVE-2021-23422
https://github.com/tabatkins/bikeshed/commit/b2f668fca204260b1cad28d5078e93471cb6b2dd
https://snyk.io/vuln/SNYK-PYTHON-BIKESHED-1537646
https://github.com/pypa/advisory-database/tree/main/vulns/bikeshed/PYSEC-2021-116.yaml
https://github.com/advisories/GHSA-87cj-px37-rc3x