Homepage
About Snyk

rtv@1.7.0 vulnerabilities

A simple terminal viewer for Reddit (Reddit Terminal Viewer)

Go back to all versions of this package
Report a new vulnerability Found a mistake?

Direct Vulnerabilities

Known vulnerabilities in the rtv package. This does not include vulnerabilities belonging to this package’s dependencies.

Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.
Fix for free
Vulnerability Vulnerable Version
  • M
Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')

Affected versions of this package are vulnerable to Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') due to not validating strings before launching the program specified by the BROWSER environment variable. This might allow remote attackers to conduct argument-injection attacks via a crafted URL.

How to fix Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')?

There is no fixed version for rtv.

[0,)
  • M
Arbitrary Code Execution

rtv is a simple terminal viewer for Reddit.

Affected versions of this package are vulnerable to Arbitrary Code Execution attacks.

[,1.12.1)
Go back to all versions of this package