https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 20:57:06 +0000 https://cve.radiocsirt.org/vuln/cnvd-2022-15525 cnvd-2022-15525 https://cve.radiocsirt.org/vuln/cnvd-2022-15525 https://cve.radiocsirt.org/vuln/euvd-2026-11226 EUVD-2026-11226 https://cve.radiocsirt.org/vuln/euvd-2026-11226 https://cve.radiocsirt.org/vuln/fkie_cve-2022-0764 <p>Arbitrary Command Injection in GitHub repository strapi/strapi prior to 4.1.0.</p> <p>Arbitrary Command Injection in GitHub repository strapi/strapi prior to 4.1.0.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-0764 https://cve.radiocsirt.org/vuln/ghsa-xrjf-phvv-r4vr <p><strong>Affected:</strong> npm: strapi</p> <p>When creating a strapi app using npxcreate-strapi-app, we can inject arbitrary commands through the template cli argument as per the code in this particular [link](https://github.com/strapi/strapi/blob/master/packages/generators/app/lib/utils/fetch-npm-template.js#L13), this happens due to improper sanitization of user input.</p> <p><strong>Affected:</strong> npm: strapi</p> <p>When creating a strapi app using npxcreate-strapi-app, we can inject arbitrary commands through the template cli argument as per the code in this particular [link](https://github.com/strapi/strapi/blob/master/packages/generators/app/lib/utils/fetch-npm-template.js#L13), this happens due to improper sanitization of user input.</p> https://cve.radiocsirt.org/vuln/ghsa-xrjf-phvv-r4vr https://cve.radiocsirt.org/vuln/gsd-2022-0764 gsd-2022-0764 https://cve.radiocsirt.org/vuln/gsd-2022-0764