Filtered by vendor Acme.sh Project Subscriptions
Total 2 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2025-32111 1 Acme.sh Project 1 Acme.sh 2025-07-13 8.7 High
The Docker image from acme.sh before 40b6db6 is based on a .github/workflows/dockerhub.yml file that lacks "persist-credentials: false" for actions/checkout.
CVE-2023-38198 1 Acme.sh Project 1 Acme.sh 2025-02-13 9.8 Critical
acme.sh before 3.0.6 runs arbitrary commands from a remote server via eval, as exploited in the wild in June 2023.