{"id":"GHSA-3988-h75v-hwf6","aliases":[],"status":"published","title":"Arbitrary shell execution","description":"A properly crafted filename would allow for arbitrary code execution when using the --filter=gitmodified command line option","facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2022-03-26T00:06:45Z","modified":"2024-12-05T05:40:06Z","fixes":[{"ecosystem":"Packagist","package":"squizlabs/php_codesniffer","fixed_in":["3.0.1"],"sources":["ghsa","osv"]}],"affected":[{"source":"ghsa","ecosystem":"Packagist","package":"squizlabs/php_codesniffer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.0.0"},{"fixed":"3.0.1"}]}]},{"source":"osv","ecosystem":"Packagist","package":"squizlabs/php_codesniffer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.0.0"},{"fixed":"3.0.1"}]}],"versions":["3.0.0"]}],"references":[{"url":"https://github.com/FriendsOfPHP/security-advisories/blob/master/squizlabs/php_codesniffer/2017-05-18.yaml","tags":["web"]},{"url":"https://github.com/squizlabs/PHP_CodeSniffer/releases/tag/3.0.1","tags":["web"]},{"url":"https://github.com/advisories/GHSA-3988-h75v-hwf6"},{"url":"https://github.com/squizlabs/PHP_CodeSniffer","tags":["package"]}],"sources":{"ghsa":[{"id":"GHSA-3988-h75v-hwf6","title":"Arbitrary shell execution","description":"A properly crafted filename would allow for arbitrary code execution when using the --filter=gitmodified command line option","status":"published","published":"2022-03-26T00:06:45Z","modified":"2023-01-11T05:05:59Z","updated_at":"2026-11-02T14:36:12.361159Z"}],"osv":[{"id":"GHSA-3988-h75v-hwf6","title":"Arbitrary shell execution","description":"A properly crafted filename would allow for arbitrary code execution when using the --filter=gitmodified command line option","status":"published","published":"2022-03-26T00:06:45Z","modified":"2024-12-05T05:40:06.764087Z","updated_at":"2026-11-02T15:46:35.406455Z"}]}}