CVE-2026-35197

dye is a portable and respectful color library for shell scripts. Prior to 1.1.1, certain dye template expressions would result in execution of arbitrary code. This issue was discovered and fixed by dye's author, and is not known to be exploited. This vulnerability is fixed in 1.1.1.

CVSS v3 6.6 MEDIUM

6.6^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 1.3 / Impact : 5.2

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction REQUIRED

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://github.com/mattieb/dye/security/advisories/GHSA-3v4r-5vfh-3wjr	Vendor Advisory
https://mattiebee.io/dye-template-advisory	Exploit Vendor Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:mattiebee:dye:1.1.0:*:*:*:*:*:*:*

History

24 Jul 2026, 21:10

Type	Values Removed	Values Added
Summary		(es) dye es una biblioteca de colores portátil y respetuosa para scripts de shell. Antes de 1.1.1, ciertas expresiones de plantilla de dye podrían resultar en la ejecución de código arbitrario. Este problema fue descubierto y corregido por el autor de dye, y no se tiene conocimiento de que haya sido explotado. Esta vulnerabilidad está corregida en 1.1.1.

16 Apr 2026, 04:13

Type	Values Removed	Values Added
References	~~() https://github.com/mattieb/dye/security/advisories/GHSA-3v4r-5vfh-3wjr -~~	() https://github.com/mattieb/dye/security/advisories/GHSA-3v4r-5vfh-3wjr - Vendor Advisory
References	~~() https://mattiebee.io/dye-template-advisory -~~	() https://mattiebee.io/dye-template-advisory - Exploit, Vendor Advisory
CPE		cpe:2.3:a:mattiebee:dye:1.1.0:::::::*
First Time		Mattiebee Mattiebee dye

06 Apr 2026, 20:16

Type	Values Removed	Values Added
New CVE

Information

Published : 2026-04-06 20:16

Updated : 2026-07-24 21:10

NVD link : CVE-2026-35197

Mitre link : CVE-2026-35197

CVE.ORG link : CVE-2026-35197

JSON object : View

Products Affected

mattiebee

dye

CWE

CWE-94

Improper Control of Generation of Code ('Code Injection')

{"id": "CVE-2026-35197", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-35197", "role": "CISA Coordinator", "options": [{"exploitation": "poc"}, {"automatable": "no"}, {"technicalImpact": "total"}], "version": "2.0.3", "timestamp": "2026-04-07T16:11:24.520575Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "security-advisories@github.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.6, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N", "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 5.2, "exploitabilityScore": 1.3}, {"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.8, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 3.9}]}, "affected": [{"source": "security-advisories@github.com", "affectedData": [{"vendor": "mattieb", "product": "dye", "versions": [{"status": "affected", "version": "< 1.1.1"}]}]}], "published": "2026-04-06T20:16:27.380", "references": [{"url": "https://github.com/mattieb/dye/security/advisories/GHSA-3v4r-5vfh-3wjr", "tags": ["Vendor Advisory"], "source": "security-advisories@github.com"}, {"url": "https://mattiebee.io/dye-template-advisory", "tags": ["Exploit", "Vendor Advisory"], "source": "security-advisories@github.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "security-advisories@github.com", "description": [{"lang": "en", "value": "CWE-94"}]}], "descriptions": [{"lang": "en", "value": "dye is a portable and respectful color library for shell scripts. Prior to 1.1.1, certain dye template expressions would result in execution of arbitrary code. This issue was discovered and fixed by dye's author, and is not known to be exploited. This vulnerability is fixed in 1.1.1."}, {"lang": "es", "value": "dye es una biblioteca de colores port\u00e1til y respetuosa para scripts de shell. Antes de 1.1.1, ciertas expresiones de plantilla de dye podr\u00edan resultar en la ejecuci\u00f3n de c\u00f3digo arbitrario. Este problema fue descubierto y corregido por el autor de dye, y no se tiene conocimiento de que haya sido explotado. Esta vulnerabilidad est\u00e1 corregida en 1.1.1."}], "lastModified": "2026-07-24T21:10:00.143", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:mattiebee:dye:1.1.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F287B375-FA78-48A2-9AB8-646B70D81484"}], "operator": "OR"}]}], "sourceIdentifier": "security-advisories@github.com"}