GCVE-110-PYPI-2026-018015

Advisory Published

Vulnetix · Advisory published October 4, 2026

[P-DEVNULL-BACKGROUND] Network/shell command backgrounded with suppressed output — matched: checks = "for tool in bash git tar gzip; do command -v \"$tool\" >/dev/null 2>&1 || printf '%s\\n' \"$tool\"; done; "

Download JSON Open in Console

Weaknesses (CWE)

CWE-506Embedded Malicious Code

Affected Products

Vendor	Product	Versions	Platforms
pypi	reason-machines-harbor	0.3.1 (affected), 0.3.2 (affected), 0.3.3 (affected), 0.3.4 (affected)	—

References

advisory

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON