Blamer Project Blamer
3 CVEs affecting Blamer Project Blamer. Latest disclosed: 2023-09-19. Critical: 2, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2020-8137 | Critical | 9.8 | 2020-03-20 | Code injection vulnerability in blamer 1.0.0 and earlier may result in remote code execution when the input can be controlled by an attacker. |
CVE-2019-10807 | Critical | 9.8 | 2020-03-11 | Blamer versions prior to 1.0.1 allows execution of arbitrary commands. It is possible to inject arbitrary commands as part of the arguments provided to blamer. |
CVE-2023-26143 | Medium | 6.5 | 2023-09-19 | Versions of the package blamer before 1.0.4 are vulnerable to Arbitrary Argument Injection via the blameByFile() API. The library does not sanitize for user in… |