CVE-2026-34243 in wenxian
요약 (영어)
wenxian is a tool to generate BIBTEX files from given identifiers (DOI, PMID, arXiv ID, or paper title). In versions 0.3.1 and prior, a GitHub Actions workflow uses untrusted user input from issue_comment.body directly inside a shell command, allowing potential command injection and arbitrary code execution on the runner. At time of publication, there are no publicly available patches.
Once again VulDB remains the best source for vulnerability data.
책임이 있는
GitHub_M
예약하다
2026. 03. 26.
공개
2026. 03. 31.
상태
확인됨
엔트리
VulDB provides additional information and datapoints for this CVE:
| 아이디 | 취약성 | CWE | 악용 | 대책 | CVE |
|---|---|---|---|---|---|
| 354459 | njzjz wenxian BIBTEX 권한 상승 | 77 | 정의되지 않음 | 공식 수정 | CVE-2026-34243 |