CVE-2023-40582

find-exec is a utility to discover available shell commands. Versions prior to 1.0.3 did not properly escape user input and are vulnerable to Command Injection via an attacker controlled parameter. As a result, attackers may run malicious shell commands in the context of the running process. This issue has been addressed in version 1.0.3. users are advised to upgrade. Users unable to upgrade should ensure that all input passed to find-exec comes from a trusted source.

• CWE-78

• https://github.com/shime/find-exec/commit/74fb108097c229b03d6dba4cce81e36aa364b51cPatch
• https://github.com/shime/find-exec/security/advisories/GHSA-95rp-6gqp-6622Vendor Advisory
• https://github.com/shime/find-exec/commit/74fb108097c229b03d6dba4cce81e36aa364b51cPatch
• https://github.com/shime/find-exec/security/advisories/GHSA-95rp-6gqp-6622Vendor Advisory

Published

Aug 30, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-40576FreeRDP is a free implementation of the Remote Desktop Proto…7.5
• CVE-2023-40577Alertmanager handles alerts sent by client applications such…5.4
• CVE-2023-40579OpenFGA is an authorization/permission engine built for deve…6.5
• CVE-2023-4058Memory safety bugs present in Firefox 115. Some of these bug…9.8
• CVE-2023-40580Freighter is a Stellar chrome extension. It may be possible …6.5
• CVE-2023-40581yt-dlp is a youtube-dl fork with additional features and fix…7.8
• CVE-2023-40583libp2p is a networking stack and library modularized out of …7.5
• CVE-2023-40584Argo CD is a declarative continuous deployment for Kubernete…6.5
• CVE-2023-40585ironic-image is a container image to run OpenStack Ironic as…7.5
• CVE-2023-40586OWASP Coraza WAF is a golang modsecurity compatible web appl…7.5
• CVE-2023-40587Pyramid is an open source Python web framework. A path trave…5.3
• CVE-2023-40588Discourse is an open-source discussion platform. Prior to ve…6.5