GCVE - cpe:2.3:a:cookiecutter_project:cookiecutter:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:cookiecutter_project:cookiecutter:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Cookiecutter Project (`3b47a475-1d99-5374-afce-14c04aa8374b`)
Product	Cookiecutter (`cf5e45c7-6a6b-542f-93fa-3ef4f1d29a8a`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from purl2cpe mapping

PURL	Source	Last updated
`pkg:deb/debian/cookiecutter`	purl2cpe	2026-06-01 10:15:39.861475
`pkg:deb/debian/python-cookiecutter`	purl2cpe	2026-06-01 10:15:39.861479
`pkg:deb/ubuntu/cookiecutter`	purl2cpe	2026-06-01 10:15:39.861483
`pkg:deb/ubuntu/python-cookiecutter`	purl2cpe	2026-06-01 10:15:39.861487
`pkg:docker/cookiecutter/cookiecutter`	purl2cpe	2026-06-01 10:15:39.861491
`pkg:github/audreyfeldroy/docker-cookiecutter`	purl2cpe	2026-06-01 10:15:39.861495
`pkg:github/cookiecutter/cookiecutter`	purl2cpe	2026-06-01 10:15:39.861499
`pkg:maven/com.adamstyrc.cookiecutter/cookie-cutter`	purl2cpe	2026-06-01 10:15:39.861503
`pkg:npm/cookiecutter`	purl2cpe	2026-06-01 10:15:39.861507
`pkg:nuget/CookieCutter`	purl2cpe	2026-06-01 10:15:39.861510
`pkg:opensuse/cookiecutter`	purl2cpe	2026-06-01 10:15:39.861514
`pkg:pypi/cookiecutter`	purl2cpe	2026-06-01 10:15:39.861518
`pkg:rpm/fedora/python-cookiecutter`	purl2cpe	2026-06-01 10:15:39.861522

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2022-24065`	vulnerable	2026-06-08 05:40:59.562213	Command Injection HIGH (8.1) The package cookiecutter before 2.1.1 are vulnerable to Command Injection via hg argument injection. When calling the cookiecutter function from Python code with the checkout parameter, it is passed to the hg checkout command in a way that additional flags can be set. The additional flags can be used to perform a command injection. Published: 2022-06-03T20:00:14.617Z Updated: 2024-09-17T00:46:55.130Z Open on db.gcve.eu Reference links https://snyk.io/vuln/SNYK-PYTHON-COOKIECUTTER-2414281 https://github.com/cookiecutter/cookiecutter/releases/tag/2.1.1 https://github.com/cookiecutter/cookiecutter/commit/fdffddb31fd2b46344dfa317531ff155e7999f77 https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HQKWT7SGFDCUPPLDIELTN7FVTHWDL5YK/ https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/G5TXC4JYTNGOUFMCXPZ6QKWEZN3URTAK/	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.