CVE-2014-0156

9.8 criticalEPSS 2.9%

Awesome spawn contains OS command injection vulnerability, which allows execution of additional commands passed to Awesome spawn as arguments. If untrusted input was included in command arguments, attacker could use this flaw to execute arbitrary command.

Severity

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 2.9% chance of exploitation in the next 30 days; higher than 87% of CVEs (scores of 2026-10-31)
CWE: CWE-78
Published: 2022-06-30
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

manageiq:awesomespawn

Packages (OSV)

Advisory	Ecosystem	Package	Affected	Fixed in
GHSA-qpqw-mc85-qvm9	RubyGems	awesome_spawn	<1.2.0	1.2.0

References

https://github.com/ManageIQ/awesome_spawn/commit/e524f85f1c6e292ef7d117d7818521307ac269ff
https://rubysec.com/advisories/CVE-2014-0156/
https://github.com/ManageIQ/awesome_spawn/commit/e524f85f1c6e292ef7d117d7818521307ac269ff
https://rubysec.com/advisories/CVE-2014-0156/

Check your stack JSON