GrepRules
Sign inPublish rule
Explore

Rule Explorer

Search the public rule index by CVE, GHSA, CWE, language, framework, author, or rule slug. Filter by language, framework, severity, confidence, license, and validation status.

Public rules
2917
Downloads
3.6M
Verified
2917
Authors
2
Search the rule indexUse CVE, GHSA, CWE, language, framework, package, or rule slug.
1 rules matched. Showing 1 loaded rules.
Publish rule
CVE-2024-22423: Python Incomplete Windows Cmd Escapingcve-2024-22423-python-incomplete-windows-cmd-escaping

Detected an incomplete escaping mechanism for Windows cmd.exe. Replacing double quotes with '""' or constructing an invocation like `/c "{args}"` using an f-string is vulnerable to command injection. Double quotes do not prevent the expansion of environment variables like `%VAR%` under cmd.exe, allowing attackers to execute arbitrary shell commands. Ensure `

PythonCVE-2024-22423CWE-88
by Provallyupdated 2026-06-12Apache-2.0
1.3K0 direct1.3K via packs
70
All matching rules loaded.