GHSA-m5cg-r367-67g4HighCVSS 7.8

An issue in nvbn thefuck v.3.32 allows a local attacker to execute arbitrary code via the...

Vendor

GitHub Security Advisories

Published

October 20, 2026

Last Modified

October 21, 2026

🔗 CVE IDs covered (1)

CVE-2026-95168 →

📋 Description

An issue in nvbn thefuck v.3.32 allows a local attacker to execute arbitrary code via the get_rules_import_paths in thefuck/corrector.py and Rule.from_path in thefuck/types.py

🔗 References (4)