https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-01T03:48:41.833905+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2022-24065 CVE-2022-24065 — Command Injection 2026-10-01T03:48:41.840222+00:00

Affected: cookiecutter

The package cookiecutter before 2.1.1 are vulnerable to Command Injection via hg argument injection. When calling the cookiecutter function from Python code with the checkout parameter, it is passed to the hg checkout command in a way that additional flags can be set. The additional flags can be used to perform a command injection.

 https://vulnerability.circl.lu/vuln/ghsa-f4q6-9qm4-h8j4 GHSA-f4q6-9qm4-h8j4 — OS Command Injection in cookiecutter 2026-10-01T03:48:41.840459+00:00

Affected: PyPI: cookiecutter

The package cookiecutter before 2.1.1 is vulnerable to Command Injection via hg argument injection. When calling the cookiecutter function from Python code with the checkout parameter, it is passed to the hg checkout command in a way that additional flags can be set. The additional flags can be used to perform a command injection.

 https://vulnerability.circl.lu/vuln/pysec-2022-204 PYSEC-2022-204 2026-10-01T03:48:41.840497+00:00

Affected: PyPI: cookiecutter

The package cookiecutter before 2.1.1 are vulnerable to Command Injection via hg argument injection. When calling the cookiecutter function from Python code with the checkout parameter, it is passed to the hg checkout command in a way that additional flags can be set. The additional flags can be used to perform a command injection.