Skip to content

Product

github.com/github/gh-ost vulnerabilities

1 published CVE affecting github.com/github/gh-ost, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
1
Critical
0
High
0
Medium
1
Low
0
Unscored
0
CISA KEV
0

Latest github.com/github/gh-ost CVEs

Newest publication first

  1. CVE-2022-21687 Command injection in gh-ost

    Published
    MediumCVSS 6.5 EPSS 1.0%

    gh-ost is a triggerless online schema migration solution for MySQL. Versions prior to 1.1.3 are subject to an arbitrary file read vulnerability. The attacker must have access to the target host or trick an administrator into executing a malicious gh-ost command on a host running...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.