wechat: add linux known CWE-78 vulnerability

2026-02-10 16:21:05 +08:00
parent d61e848bfa
commit 0f8e2789cc
1 changed files with 6 additions and 0 deletions
@@ -23,6 +23,12 @@ let
      "aarch64-linux"
      "x86_64-linux"
    ];
+    knownVulnerabilities = lib.optional stdenvNoCC.hostPlatform.isLinux ''
+      CWE-78: Clicking on a file attachment whose name contains backtick-quoted
+      commands will cause it to be executed.
+
+      Reference: https://archive.ph/A5McZ (Chinese)
+    '';
  };

  sources =