Skip to content

python-fire: (1) PAGER+shell=True RCE in console_io.More (2) bash $(...) runs when sourcing --completion from maliciously named .py file. PoC verified. #408

python-fire: (1) PAGER+shell=True RCE in console_io.More (2) bash $(...) runs when sourcing --completion from maliciously named .py file. PoC verified.

python-fire: (1) PAGER+shell=True RCE in console_io.More (2) bash $(...) runs when sourcing --completion from maliciously named .py file. PoC verified. #408

Triggered via pull request August 1, 2026 05:29
Status Failure
Total duration 30d 0h 2m 41s
Artifacts

build.yml

on: pull_request
Matrix: build
Waiting for pending jobs
Fit to window
Zoom out
Zoom in

Annotations

1 error
Python Fire
This workflow run required approval but was not approved before it expired.