GitHub Advisoryadvisory · Packagist

GHSA-3988-h75v-hwf6 Arbitrary shell execution

HIGH Published 2022-03-26 Modified 2022-03-26 Official page ↗

Ecosystem: Packagist
Packages: squizlabs/php_codesniffer
Severity: High
Reviewed: 2022-03-26

Affected packages

• Packagist squizlabs/php_codesniffer: >= 3.0.0, < 3.0.1 → fixed in 3.0.1

Description

A properly crafted filename would allow for arbitrary code execution when using the --filter=gitmodified command line option

References