Skip to content

python-fire: (1) PAGER+shell=True RCE in console_io.More (2) bash $(...) runs when sourcing --completion from maliciously named .py file. PoC verified. - #689

Open
ojassharma7 wants to merge 1 commit into
google:masterfrom
ojassharma7:autocontrib/issue-665
Open

python-fire: (1) PAGER+shell=True RCE in console_io.More (2) bash $(...) runs when sourcing --completion from maliciously named .py file. PoC verified.#689
ojassharma7 wants to merge 1 commit into
google:masterfrom
ojassharma7:autocontrib/issue-665

python-fire: (1) PAGER+shell=True RCE in console_io.More (2) bash $(.…

3daf355
Select commit
Loading
Failed to load commit list.
Sign in for the full log view
check-changes
succeeded Aug 1, 2026 in 6s