I haven't ran nor looked at the code for PeaZip, but the website describes the p... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

chungy on May 11, 2024 | parent | context | favorite | on: PeaZip: Open-source file compression and encryptio...

I haven't ran nor looked at the code for PeaZip, but the website describes the program as a GUI wrapper around command line utilities. I highly suspect it's the sub-shell thing.

fallingsquirrel on May 11, 2024 [–]

That's concerning. What if your archive password is ;rm -rf --no-preserve-root /? There might be an easy CVE for the taking here.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact