Vulnerability · Published Apr 15, 2026 · Assigned by mitre
CVE-2024-53412
High 8.4
In plain English
A high-severity command injection in the github.com/NietThijmen/ShoppingCart package (Go). Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.6% (higher than 47% of all known vulnerabilities).
Severity (CVSS 3.1)8.4High
Exploit odds (30 days)0.6%top 53.3% of all CVEs
Exploited in the wildNo reportsCISA SSVC: poc
Attack toolingNoneno public tooling known
Official description
Command injection in the connect function in NietThijmen ShoppingCart 0.0.2 allows an attacker to execute arbitrary shell commands and achieve remote code execution via injection of malicious payloads into the Port field
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| Go | github.com/NietThijmen/ShoppingCart | no fix listed | GHSA-ggmw-mjhv-75rm |
| Go | github.com/NietThijmen/ShoppingCart | no fix listed | GO-2026-5398 |
Affected products (as reported)
Weakness: CWE-77 · Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H