Skip to content

[Aikido] Fix security issue in glob via minor version upgrade from 10.4.5 to 10.5.0#13

Open
aikido-autofix[bot] wants to merge 1 commit intomainfrom
fix/aikido-security-update-packages-16861232-9XLc
Open

[Aikido] Fix security issue in glob via minor version upgrade from 10.4.5 to 10.5.0#13
aikido-autofix[bot] wants to merge 1 commit intomainfrom
fix/aikido-security-update-packages-16861232-9XLc

Conversation

@aikido-autofix
Copy link
Copy Markdown
Contributor

Patch critical RCE vulnerability in glob CLI by sanitizing filename handling to prevent shell command injection via malicious filenames

✅ 1 CVE resolved by this upgrade

This PR will resolve the following CVEs:

Issue Severity           Description
CVE-2025-64756
HIGH
[glob] A command injection vulnerability in the CLI's -c/--cmd option allows arbitrary code execution when processing files with malicious names, as matched filenames are passed to a shell with shell metacharacters interpreted.
🔗 Related Tasks

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant