CVE-2022-45145: Call-Cc Chicken

Critical severity, CVSS 9.8. EPSS: 1.4% chance of exploitation in the next 30 days.

egg-compile.scm in CHICKEN 5.x before 5.3.1 allows arbitrary OS command execution during package installation via escape characters in a .egg file.

Affected products

• Call-Cc Chicken: from 5.0.0, before 5.3.1 (fixed in 5.3.1)

Published 2022-12-10. Last modified 2026-06-17.