GHSA-w65q-jcmv-28gjCriticalCVSS 9.8
Dynamic Linq vulnerable to remote code execution
🔗 CVE IDs covered (1)
📋 Description
Dynamic Linq 1.0.7.10 through 1.2.25 before 1.3.0 allows attackers to execute arbitrary code and commands when untrusted input to methods including Where, Select, OrderBy is parsed.
🎯 Affected products1
- nuget/System.Linq.Dynamic.Core:>= 1.0.7.10, < 1.3.0