GCVE-110-MAGEIA-2024-276

Advisory Published

Vulnetix · Advisory published July 31, 2024

In Emacs before 29.4, org-link-expand-abbrev in lisp/ol.el expands a %(...) link abbrev even when it specifies an unsafe function, such as shell-command-to-string. (CVE-2024-39331)

Download JSON Open in Console

Affected Products

Vendor	Product	Versions	Platforms
Mageia	emacs	0 (affected), 29.4-1.mga9 (unaffected)	—

References

Updated emacs packages improve Wayland support and fix a security vulnerability

advisory

Updated emacs packages improve Wayland support and fix a security vulnerability

issue

Updated emacs packages improve Wayland support and fix a security vulnerability

issue

Updated emacs packages improve Wayland support and fix a security vulnerability

issue

Browse GCVE Records

72,664 records in the GCVE database · Updated July 15, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON