GHSA-3988-h75v-hwf6
Arbitrary shell execution
No scoreFix available
A properly crafted filename would allow for arbitrary code execution when using the --filter=gitmodified command line option
What each source reports
GitHub AdvisoriesNo score
Arbitrary shell execution
A properly crafted filename would allow for arbitrary code execution when using the --filter=gitmodified command line option
- Record
GHSA-3988-h75v-hwf6- Updated
- 2026-11-02
OSVNo score
Arbitrary shell execution
A properly crafted filename would allow for arbitrary code execution when using the --filter=gitmodified command line option
- Record
GHSA-3988-h75v-hwf6- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
squizlabs/php_codesnifferPackagist | 3.0.0 up to 3.0.1 | 3.0.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | GitHub Advisories, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
GHSA-3988-h75v-hwf6 is a vulnerability with no CVSS score yet in squizlabs/php_codesniffer, published March 26, 2022. No source lists public exploit code. Fixed in squizlabs/php_codesniffer 3.0.1.