Approved changes feed: RSS · Atom

cpe:2.3:a:adobe:ops-cli:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorAdobe (fb293c1b-cab3-5565-9184-186e4ece530b)
ProductOps Cli (383258fc-bafb-5cd1-9e51-8948e56b21cc)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:docker/adobe/ops-cli purl2cpe 2026-06-01 10:14:22.919399
pkg:github/adobe/ops-cli purl2cpe 2026-06-01 10:14:22.919401
pkg:pypi/ops-cli purl2cpe 2026-06-01 10:14:22.919404

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-40720 vulnerable 2026-06-08 05:35:18.971565 Ops CLI Deserialization of Untrusted Data leads to Abritrary Code Execution
CRITICAL (9.8)
Ops CLI version 2.0.4 (and earlier) is affected by a Deserialization of Untrusted Data vulnerability to achieve arbitrary code execution when the checkout_repo function is called on a maliciously crafted file. An attacker can leverage this to execute arbitrary code on the victim machine.
Published: 2021-10-15T14:22:00.184Z
Updated: 2024-09-16T16:17:57.614Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.