CVE-2022-25171: p4 Project p4

Critical severity, CVSS 9.8. EPSS: 2.5% chance of exploitation in the next 30 days.

The package p4 before 0.0.7 are vulnerable to Command Injection via the run() function due to improper input sanitization

Affected products

• p4 Project p4: before 0.0.7 (fixed in 0.0.7)

Published 2022-12-20. Last modified 2026-06-17.