All rules →
Rules / Go
SHIELD-GO-007

Command injection via exec.Command with user input

criticalGoCWE-78CVSS 9.8

What it detects

Passing user-controlled data to exec.Command allows command injection.

How to fix

Never pass user input directly to exec.Command. Validate and allowlist commands and arguments.

Scan your repo freeFull documentation
Back to all rules
SHIELD-GO-007: Command injection via exec.Command with user input — Zennoxa Shield