https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T22:02:44.811583+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2022-38166 cnvd-2022-38166 2026-10-03T22:02:44.883050+00:00 cnvd-2022-38166 https://cve.radiocsirt.org/vuln/euvd-2026-178524 EUVD-2026-178524 2026-10-03T22:02:44.883093+00:00 EUVD-2026-178524 https://cve.radiocsirt.org/vuln/fkie_cve-2022-21223 fkie_cve-2022-21223 2026-10-03T22:02:44.883109+00:00

The package cocoapods-downloader before 1.6.2 are vulnerable to Command Injection via hg argument injection. When calling the download function (when using hg), the url (and/or revision, tag, branch) is passed to the hg clone command in a way that additional flags can be set. The additional flags can be used to perform a command injection.

 https://cve.radiocsirt.org/vuln/ghsa-g397-v4w5-4m79 GHSA-g397-v4w5-4m79 — Command injection in cocoapods-downloader 2026-10-03T22:02:44.883141+00:00

Affected: RubyGems: cocoapods-downloader

The package cocoapods-downloader before 1.6.2 are vulnerable to Command Injection via hg argument injection. When calling the download function (when using hg), the url (and/or revision, tag, branch) is passed to the hg clone command in a way that additional flags can be set. The additional flags can be used to perform a command injection.

 https://cve.radiocsirt.org/vuln/gsd-2022-21223 gsd-2022-21223 2026-10-03T22:02:44.883165+00:00 gsd-2022-21223