CVE-2024-58266
Published Jul 27, 2025The shlex crate before 1.2.1 for Rust allows unquoted and unescaped instances of the { and \xa0 characters, which may facilitate command injection.
- evidence mentions
- 1
- Buzz score
- 11.9
Vendor/product archive
1 CVEs tagged to comex / shlex — 0 Critical, 0 High, 0 Medium, 1 Low, 0 Unrated.
The shlex crate before 1.2.1 for Rust allows unquoted and unescaped instances of the { and \xa0 characters, which may facilitate command injection.