High
CVSS 7.5
Overview
canto_curses/guibase.py in Canto Curses before 0.9.0 allows remote feed servers to execute arbitrary commands via shell metacharacters in a URL in a feed.
canto_curses/guibase.py in Canto Curses before 0.9.0 allows remote feed servers ...
canto_curses/guibase.py in Canto Curses before 0.9.0 allows remote feed servers to execute arbitrary commands via shell metacharacters in a URL in a feed.
This vulnerability is rated 🟠 HIGH.
Recommended actions: