CVE-2026-67180: Python Grep Argument Injection

Constructing CLI command list for grep without explicit '--' option delimiter allows argument injection if file paths or arguments start with hyphens.

Provally CuratedPublic repositoryMediumMedium confidenceVerifiedApache-2.0Python
greprules fetch cve-2026-67180-python-grep-argument-injection --engine opengrep

Description

Constructing CLI command list for grep without explicit '--' option delimiter allows argument injection if file paths or arguments start with hyphens.