VYPR

Sweater Comb

by Rich Harris

CVEs (1)

  • CVE-2026-75486HigAug 28, 2026
    risk 0.45cvss 8.0epss

    Synk Sweater Comb before 3.8.8 contains a command injection vulnerability that allows an attacker who controls the .vervet.yaml configuration file to execute arbitrary OS commands by injecting malicious input into the linters..optic-ci.original branch name field. The…