CVE-2023-35932

jcvi is a Python library to facilitate genome assembly, annotation, and comparative genomics. A configuration injection happens when user input is considered by the application in an unsanitized format and can reach the configuration file. A malicious user may craft a special payload that may lead to a command injection. The impact of a configuration injection may vary. Under some conditions, it may lead to command injection if there is for instance shell code execution from the configuration file values. This vulnerability does not currently have a fix.

• CWE-77
• CWE-1284

• https://github.com/tanghaibao/jcvi/blob/cede6c65c8e7603cb266bc3395ac8f915ea9eac7/jcvi/apps/base.py#LL2227C1-L2228C41Product
• https://github.com/tanghaibao/jcvi/security/advisories/GHSA-x49m-3cw7-gq5qVendor Advisory
• https://github.com/tanghaibao/jcvi/blob/cede6c65c8e7603cb266bc3395ac8f915ea9eac7/jcvi/apps/base.py#LL2227C1-L2228C41Product
• https://github.com/tanghaibao/jcvi/security/advisories/GHSA-x49m-3cw7-gq5qVendor Advisory

Published

Jun 23, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-35927NextCloud Server and NextCloud Enterprise Server provide fil…8.1
• CVE-2023-35928Nextcloud Server is a space for data storage on Nextcloud, a…8.8
• CVE-2023-35929Tuleap is a free and open source suite to improve management…5.4
• CVE-2023-3593Mattermost fails to properly validate markdown, allowing an …6.5
• CVE-2023-35930SpiceDB is an open source, Google Zanzibar-inspired, databas…5.3
• CVE-2023-35931Shescape is a simple shell escape library for JavaScript. An…4.3
• CVE-2023-35933OPenFGA is an open source authorization/permission engine bu…7.5
• CVE-2023-35934yt-dlp is a command-line program to download videos from vid…8.2
• CVE-2023-35935Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMB…
• CVE-2023-35936Pandoc is a Haskell library for converting from one markup f…5
• CVE-2023-35937Metersphere is an open source continuous testing platform. I…8.8
• CVE-2023-35938 Tuleap is a Free & Open Source Suite to improve management …7.2