intake vulnerabilities

Products

• intake 1

Latest intake CVEs

Newest publication first

1. CVE-2026-33310 Intake has a Command Injection via shell() Expansion in Parameter Defaults

   Published 2026-03-24

   High·CVSS 8.8 EPSS 0.45%

   Intake is a package for finding, investigating, loading and disseminating data. Prior to version 2.0.9, the shell() syntax within parameter default values appears to be automatically expanded during the catalog parsing process. If a catalog contains a parameter default such as sh...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.