| Package | Affected versions | Patched versions |
|---|---|---|
| gzip | < 1.3.5 | 1.3.5 |
zgrep in gzip before 1.3.5 does not properly sanitize arguments, which allows local users to execute arbitrary commands via filenames that are injected into a sed script.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free