Vulnerabilidades de NellyW8
CVEs publicadas que afetam produtos de NellyW8: 1 registro(s), com severidade, exploração e correções.
CVE-2026-19332
Média · 5.3
CWE-74 09/08/2026
NellyW8 MCP4EDA run_openlane/view_waveform command injection
A security vulnerability has been detected in NellyW8 MCP4EDA 1.0.0. Affected by this vulnerability is an unknown functionality of the component run_openlane/view_waveform. The manipulation of the argument design_name/vcd_file leads to command injection. Local access is required to approach this attack. The project was informed of the problem early through an issue report but has not responded yet.