{"id":"GHSA-3988-h75v-hwf6","aliases":[],"title":"Arbitrary shell execution","titleSource":"OSV","descriptionSource":"OSV","declaredSeverity":"HIGH","description":"A properly crafted filename would allow for arbitrary code execution when using the --filter=gitmodified command line option","severity":"high","score":null,"published":"2022-03-26T00:06:45.000Z","modified":"2024-12-05T05:40:06.764Z","withdrawn":false,"knownExploited":false,"affected":[{"ecosystem":"Packagist","name":"squizlabs/php_codesniffer","sources":[{"name":"OSV · GHSA-3988-h75v-hwf6","url":"https://osv.dev/vulnerability/GHSA-3988-h75v-hwf6"}],"ranges":[{"events":[{"introduced":"3.0.0"},{"fixed":"3.0.1"}],"type":"ECOSYSTEM"}],"versions":["3.0.0"],"fixed":["3.0.1"]}],"sourceAffected":[],"references":["https://github.com/FriendsOfPHP/security-advisories/blob/master/squizlabs/php_codesniffer/2017-05-18.yaml","https://github.com/squizlabs/PHP_CodeSniffer","https://github.com/squizlabs/PHP_CodeSniffer/releases/tag/3.0.1"],"sources":[{"name":"OSV","id":"GHSA-3988-h75v-hwf6","modified":"2024-12-05T05:40:06.764087Z","url":"https://osv.dev/vulnerability/GHSA-3988-h75v-hwf6"}],"assessments":[],"products":[],"remediation":[],"kev":{"status":"unavailable","checkedAt":"2026-10-28T11:55:31.891Z"},"coverage":[{"source":"NVD","status":"not-checked"},{"source":"GHSA","status":"not-checked"},{"source":"EUVD","status":"not-checked"},{"source":"EPSS","status":"not-checked"}],"evidence":[]}