| Package | Affected versions | Patched versions |
|---|---|---|
| acme.sh | < 3.0.6 | 3.0.6 |
acme.sh before 3.0.6 runs arbitrary commands from a remote server via eval, as exploited in the wild in June 2023.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free