~lobsters | Bookmarks (4)

Apr. 9, 2024 · The Rust Security Response WG The Rust Security Response WG was notified that the Rust standard library did not properly escape arguments when invoking batch files (with the bat and cmd extensions) on Windows using the Command API. An attacker able to control the arguments passed to the spawned proces...