CLEANSTART-2024-WU84406

See a problem?
Import Source
https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2024/CLEANSTART-2024-WU84406.json
JSON Data
https://api.osv.dev/v1/vulns/CLEANSTART-2024-WU84406
Upstream
Published
2026-10-30T18:22:18Z
Modified
2026-10-31T01:00:21Z
Severity
  • 7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N CVSS Calculator
Summary
Due to unsanitized NUL values, attackers may be able to maliciously set environment variables on Windows
Details

Security vulnerability affects the go package. Due to unsanitized NUL values, attackers may be able to maliciously set environment variables on Windows.

References

Affected packages

CleanStart / go

Package

Name
go
Purl
pkg:apk/cleanstart/go

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
0

Database specific

source
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2024/CLEANSTART-2024-WU84406.json"