medium5.3
CVE-2024-27763
XPixelGroup BasicSR Command Injection
Impact
XPixelGroup BasicSR through 1.4.2 might locally allow code execution in contrived situations where "scontrol show hostname" is executed in the presence of a crafted SLURM_NODELIST environment variable.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| pip | basicsr | <= 1.4.2 | none recorded |
Affected products
| Product | Affected versions |
|---|---|
| XPixelGroup BasicSR | through 1.4.2 |
Versions were read from the advisory text. No structured product data has been published for this record yet.