uniget: EDITOR Command Injection in uniget CLI

These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.

CVE-2026-55061 · Microsoft / collected KEV context

EUVD-2026-82371

GHSA-qmcq-xw74-w667

GO-2026-6248

cve-program · CVE-2026-55061

• https://github.com/uniget-org/cli/security/advisories/GHSA-qmcq-xw74-w667
• https://github.com/uniget-org/cli/commit/7b4f18a9f00f0955f830c7ccf266ed0de5f9fd91
• https://github.com/uniget-org/cli/releases/tag/v0.27.6

euvd · EUVD-2026-82371

• https://github.com/uniget-org/cli/security/advisories/GHSA-qmcq-xw74-w667
• https://github.com/uniget-org/cli/commit/7b4f18a9f00f0955f830c7ccf266ed0de5f9fd91
• https://github.com/uniget-org/cli/releases/tag/v0.27.6

nvd · CVE-2026-55061

• https://github.com/uniget-org/cli/commit/7b4f18a9f00f0955f830c7ccf266ed0de5f9fd91
• https://github.com/uniget-org/cli/releases/tag/v0.27.6
• https://github.com/uniget-org/cli/security/advisories/GHSA-qmcq-xw74-w667

osv · GHSA-qmcq-xw74-w667

• https://github.com/uniget-org/cli/security/advisories/GHSA-qmcq-xw74-w667
• https://github.com/uniget-org/cli/commit/7b4f18a9f00f0955f830c7ccf266ed0de5f9fd91
• https://github.com/uniget-org/cli
• https://github.com/uniget-org/cli/releases/tag/v0.27.6

osv · GO-2026-6248

• https://github.com/uniget-org/cli/security/advisories/GHSA-qmcq-xw74-w667
• https://github.com/uniget-org/cli/commit/7b4f18a9f00f0955f830c7ccf266ed0de5f9fd91
• https://github.com/uniget-org/cli/releases/tag/v0.27.6

No related operational record is retained in the current change model.