CVE-2026-30351: Skipped Project Specific Command Execution
A user-controlled property named 'command' is passed to a generic execution method (e.g., .start(), .run()). This could indicate command injection if the underlying method acts as an OS command execution wrapper. (Ruleability: Skip)
Provally CuratedPublic repositoryMediumMedium confidenceVerifiedApache-2.0python
greprules fetch cve-2026-30351-skipped-project-specific-command-execution --engine opengrepDescription
A user-controlled property named 'command' is passed to a generic execution method (e.g., .start(), .run()). This could indicate command injection if the underlying method acts as an OS command execution wrapper. (Ruleability: Skip)
Detection target
Not provided
Recommended fix
Not provided
False-positive notes
Not provided
Community feedback
Sign in to report false positives, mark this rule useful, or suggest metadata improvements.