CVE-2021-36376

Description

dandavison delta before 0.8.3 on Windows resolves an executable's pathname as a relative path from the current directory.

Affected Platforms

Weakness Type

CWE-427

References

• https://github.com/dandavison/delta/commit/f01846bd443aaf92fdd5ac20f461beac3f6ee…
• https://github.com/dandavison/delta/releases/tag/0.8.3
• https://vuln.ryotak.me/advisories/54
• https://github.com/dandavison/delta/commit/f01846bd443aaf92fdd5ac20f461beac3f6ee…
• https://github.com/dandavison/delta/releases/tag/0.8.3
• https://vuln.ryotak.me/advisories/54