{"id":"CVE-2019-8255","details":"Brackets versions 1.14 and earlier have a command injection vulnerability. Successful exploitation could lead to arbitrary code execution.","modified":"2026-04-10T04:20:26.564659Z","published":"2019-12-19T20:15:12.677Z","references":[{"type":"ADVISORY","url":"https://helpx.adobe.com/security/products/brackets/apsb19-57.html"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/adobe/brackets","events":[{"introduced":"0"},{"last_affected":"329d08ffc3c2c97784146f991d65f1aaf840db40"}],"database_specific":{"versions":[{"introduced":"0"},{"last_affected":"1.14"}]}}],"versions":["0.30.0-8785","0.30.0-8833","linux-cef-2171","release-0.43-beta1","release-0.44-beta1","release-1.0-beta1","release-1.0-rc1","release-1.1-rc1","release-1.10","release-1.11","release-1.12","release-1.13","release-1.14","release-1.2-prerelease1","release-1.4+eb4","release-1.6-prerelease1","release-1.7","release-1.7-prerelease1","release-1.8","release-1.8-prerelease","release-1.9","splitview-pre-tree","sprint-1","sprint-10","sprint-11","sprint-12","sprint-13","sprint-14","sprint-15","sprint-16","sprint-17","sprint-19","sprint-2","sprint-22","sprint-24","sprint-25","sprint-26","sprint-27","sprint-28","sprint-29","sprint-3","sprint-30","sprint-31","sprint-32","sprint-33","sprint-34","sprint-4","sprint-5","sprint-6","sprint-7","sprint-8","sprint-9","test-45","untagged-293a2ac7be89eb7a80b8","untagged-71c185fc4eecfb5086d0","v34.10534","v34.10744"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2019-8255.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"}]}