Skip to content
Threat Feed
Subscribe

Product

Sweater Comb (< 3.8.8)

1 brief RSS
high advisory

Command Injection in Synk Sweater Comb

Synk Sweater Comb before version 3.8.8 contains a command injection vulnerability in the expectGitBranch() function, allowing arbitrary OS command execution via crafted .vervet.yaml configuration files.

Sweater Comb vulnerability remote-code-execution ci-cd-security
1t 1c