EXPOSURES › CVE-2026-35197
CVE-2026-35197
MEDIUM
DETAIL
SourceNVD · cve
Published2026-04-06
CVSS6.6
Referencehttps://nvd.nist.gov/vuln/detail/CVE-2026-35197 ↗
▸ RECOMMENDED ACTION Patch the affected products and confirm your instances are covered.
PLAYERS IMPLICATED
DESCRIPTION
dye is a portable and respectful color library for shell scripts. Prior to 1.1.1, certain dye template expressions would result in execution of arbitrary code. This issue was discovered and fixed by dye's author, and is not known to be exploited. This vulnerability is fixed in 1.1.1.
AFFECTED FEDRAMP PRODUCTS · 0
No correlated FedRAMP products.