rpm package
opensuse/goose&distro=openSUSE Tumbleweed
pkg:rpm/opensuse/goose&distro=openSUSE%20Tumbleweed
Vulnerabilities (1)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2026-85623 | Hig | 8.8 | < 1.51.0-1.1 | 1.51.0-1.1 | Sep 4, 2026 | goose 1.37.0 executes arbitrary commands from recipe stdio extensions and retry.checks without security inspection. Attackers can distribute malicious recipes that execute shell commands as the user running goose, bypassing the recipe security scan which does not inspect extensio |
- affected < 1.51.0-1.1fixed 1.51.0-1.1
goose 1.37.0 executes arbitrary commands from recipe stdio extensions and retry.checks without security inspection. Attackers can distribute malicious recipes that execute shell commands as the user running goose, bypassing the recipe security scan which does not inspect extensio