Skip to content

python-fire: (1) PAGER+shell=True RCE in console_io.More (2) bash $(...) runs when sourcing --completion from maliciously named .py file. PoC verified. - #689

Open
ojassharma7 wants to merge 1 commit into
google:masterfrom
ojassharma7:autocontrib/issue-665
Open

python-fire: (1) PAGER+shell=True RCE in console_io.More (2) bash $(...) runs when sourcing --completion from maliciously named .py file. PoC verified.#689
ojassharma7 wants to merge 1 commit into
google:masterfrom
ojassharma7:autocontrib/issue-665

python-fire: (1) PAGER+shell=True RCE in console_io.More (2) bash $(.…

3daf355
Select commit
Loading
Failed to load commit list.
Google CLA / cla/google succeeded Aug 1, 2026 in 7s

✅ All contributors are covered under a CLA with Google

See https://cla.developers.google.com/ for more info about Google's Contributor License Agreement (CLA).

ℹ️ Googlers: Go here to view more details and manage scans for this pull request.

Details

The following contributors were found for this pull request:

✅ 3daf355 Author: @ojassharma7 <oja******a16​@gmail.com>

(Only the first commit for a unique contributor is listed.)

View more details on Google CLA