Vulnerabilities
AWS releases jsii-diff 1.131.0 to patch CVE-2026-15895 shell execution flaw in utility
A flaw in the AWS jsii-diff utility allowed shell execution via crafted arguments. Version 1.131.0 resolves the issue.
command injection
Everything TechSec Observer has reported about command injection: 2 stories, newest first. Part of our Vulnerabilities coverage.
Vulnerabilities
Command Injection: How Unsanitised Input Breaks Your Shell
Command injection allows attackers to execute arbitrary system commands by exploiting applications that pass user data directly to the underlying operating system shell.