Intel/AIKIDO-2024-10001
AIKIDO-2024-10001
lilconfig is vulnerable to Code Injection
CVE-2024-21537Published Feb 23, 2024
February 23, 2024
50
CVE Score
Medium
Code Injection
Are you affected? Scan for Free
TL;DR
A code injection vulnerability was silently addressed in version 3.1.1 of lilconfig, impacting all uses of the package in earlier versions.
How do I fix this?
To fix, upgrade to lilconfig 3.1.1 or above.
Who does this affect?
You are affected by this flaw if you use the 3.1.0 version of this package.
Package
Versions
3.1.0 - 3.1.0
Fixed in 3.1.1Background info
lilconfig is vulnerable to Code Injection in versions 3.1.0 - 3.1.0.
Links
GitHub Release
Get secure today,
quickly and for free.
Secure your code, cloud, and runtime in one central system. Connect a repo to discover what the reasoning agents find in your codebase.
No credit card required | Scan results in 32 seconds.
Trusted by 150k+ orgs
Resources
Industries
Use Cases
Compare
Subscribe
Stay up to date with all updates
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
© 2026 Aikido Security BV | BE0792914919
Keizer Karelstraat 15, 9000, Ghent, Belgium
95 Third St, 2nd Fl, San Francisco, CA 94103, US
Unit 6.15 Runway East 18 18 Crucifix Ln, London SE1 3JW UK
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPAuthorized© All Intel data is openly available and commercially licensed.