VDB
GCVE-110-VULN-GO-2026-000566
GCVE-110-VULN-GO-2026-000566
Advisory PublishedCVSS 4.2/10
[GO-EXEC-SHELL] exec.Command invoking a shell with -c (arbitrary command execution) — matched: cmd = exec.Command("/bin/sh", "-c", hook)
Weaknesses (CWE)
CWE-78Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Risk Scores
CVSS 3.1
4.2/10
Medium · CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:L
Affected Products
| Vendor | Product | Versions | Platforms |
|---|---|---|---|
| go | github.com/plakarlabs/plakar | 1.0.4-0.20260907084255 (affected) | — |
Browse GCVE Records
752 records in the GCVE database · Updated November 2, 2026
No matching records found.
Explore Further
Investigate this vulnerability in the interactive console or download the raw GCVE record.