Skip to content
Threat Feed
Subscribe

Vendor

PHPCSStandards

1 brief RSS
high advisory

Command Injection in PHP_CodeSniffer via Malicious Filenames

PHP_CodeSniffer versions prior to 3.13.6 and 4.0.2 are vulnerable to command injection via the Gitblame, Hgblame, and Svnblame reports when processing files containing shell metacharacters.

PHP_CodeSniffer +1
1t 1c