| Package | Affected versions | Patched versions |
|---|---|---|
| xz | ≤ 4.999.9 |
scripts/xzgrep.in in xzgrep 5.2.x before 5.2.0, before 5.0.0 does not properly process file names containing semicolons, which allows remote attackers to execute arbitrary code by having a user run xzgrep on a crafted file name.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free