AIKIDO-2026-10635
github.com/aixgo-dev/aixgo is vulnerable to Command Injection
75
High Risk
This Affects:
github.com/aixgo-dev/aixgoTL;DR
Affected versions of this package are vulnerable to command/argument injection due to the use of direct string construction to invoke external commands (such as gcloud) without validating or safely handling the arguments. This flaw could allow attackers to inject malicious command-line input, leading to unauthorized command execution or privilege escalation (gosec G204 context).
Who does this affect?
You are affected if you are using a version that falls within the vulnerable range.
Background info
github.com/aixgo-dev/aixgo is vulnerable to Command Injection in versions 0.3.0 - 0.7.2.
How to fix this
Upgrade the github.com/aixgo-dev/aixgo library to the patch version.
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
SOC 2Compliant
ISO 27001Compliant