GHSA-x23q-4j9j-9cxwCriticalCVSS 9.8

Ops CLI Deserialization of Untrusted Data vulnerability

Published
May 24, 2022
Last Modified
October 7, 2024

🔗 CVE IDs covered (1)

CVE-2021-40720 →

📋 Description

Ops CLI version 2.0.4 (and earlier) is affected by a Deserialization of Untrusted Data vulnerability to achieve arbitrary code execution when the checkout_repo function is called on a maliciously crafted file. An attacker can leverage this to execute arbitrary code on the victim machine.

🎯 Affected products1

  • pip/ops-cli:<= 2.0.4

🔗 References (4)