Opensuse · Obs-Service-Source Validator · CVE-2017-9274
**Name of the Vulnerable Software and Affected Versions**
obs-service-source validator versions prior to 0.7
**Description**
A shell command injection issue exists in the handling of RPM SPEC files with specific macro constructs, potentially allowing code execution as the packager.
**Recommendations**
For versions prior to 0.7, update to version 0.7 or later to resolve the issue.