PT-2026-53626 · Pypi · Uni2Ts

Publicado 2026-06-29 · Atualizado 2026-06-29

OSV

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Improper Control of Generation of Code ('Code Injection') vulnerability in Salesforce Uni2TS on MacOS, Windows, Linux allows Leverage Executable Code in Non-Executable Files.This issue affects Uni2TS: through 1.2.0.

Correção

Identificadores relacionados

PYSEC-2026-557

Produtos afetados

Uni2Ts

Referências · 9

• https://github.com/SalesforceAIResearch/uni2ts/commit/7f2d51dd729de018f0f22504f39a8475c6fed1c4 · Nota
• https://github.com/SalesforceAIResearch/uni2ts · Nota
• https://github.com/SalesforceAIResearch/uni2ts/releases/tag/2.0.0 · Nota
• https://github.com/SalesforceAIResearch/uni2ts/pull/218 · Nota
• https://github.com/advisories/GHSA-7x99-8x99-xc54 · Nota
• https://osv.dev/vulnerability/PYSEC-2026-557 · Aviso do Fabricante
• https://pypi.org/project/uni2ts · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-22584 · Nota de Segurança
• https://help.salesforce.com/s/articleView?id=005239354&type=1 · Nota