CVE-2022-29583: Service Project Service

High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days.

service_windows.go in the kardianos service package for Go omits quoting that is sometimes needed for execution of a Windows service executable from the intended directory. NOTE: this finding could not be reproduced by its original reporter or by others.

Affected products

• Service Project Service: affected versions not specified

Published 2022-04-22. Last modified 2026-06-17.