PoC for CVE-2026-46420, command injection in shivammathur/setup-php via repository-controlled PHP version resolution.
-
Updated
Jul 18, 2026
#
cwe-78
Here are 9 public repositories matching this topic...
Advisory for git-js ⌯⌲ 11 mill weekly downloads
-
Updated
Jun 11, 2026
Reproducible research and local test environment for CNVD-2026-20654 (CWE-78)
-
Updated
Jul 29, 2026 - HTML
Advisory for node-tesseract-ocr ⌯⌲ 50 000 weekly downloads
-
Updated
Mar 24, 2026
Advisory for textract ⌯⌲ 15 000 weekly downloads
-
Updated
Mar 24, 2026
Advisory for pdf-image ⌯⌲ 10 000 weekly downloads
-
Updated
Mar 24, 2026
POSIX shell in C with audit logging mapped to NIST SP 800-53, plus CWE-78 command injection and CWE-287 UID spoofing exploit demos with hardened fixes
-
Updated
Jul 22, 2026 - C
Improve this page
Add a description, image, and links to the cwe-78 topic page so that developers can more easily learn about it.
Add this topic to your repo
To associate your repository with the cwe-78 topic, visit your repo's landing page and select "manage topics."