CVE-2022-41032: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

October 11, 2022

NuGet Client Elevation of Privilege Vulnerability.

References

github.com/NuGet/Announcements/issues/65
github.com/NuGet/NuGet.Client/security/advisories/GHSA-g3q9-xf95-8hp5
github.com/advisories/GHSA-g3q9-xf95-8hp5

Detect and mitigate CVE-2022-41032 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →