Changes.Watch~ upgrade verdicts ~
Free digest
CriticalPHP2Shell: is your PHP patched?

critical vulnerability

OpenC3 COSMOS: Authenticated remote code execution via the user-writable config overlay (table definitions, cmd/tlm definitions, and script suites)

Fix availableCritical · CVSS 9.9EPSS 0.57%

Published Sep 23, 2026 · updated Sep 23, 2026

What to do

  1. Upgrade to a fixed version: openc3 7.3.0.
  2. Redeploy and restart long-running processes so they load the fixed code.

Affected packages

RubyGemsopenc3

Vulnerable versions
>= 5.1.0, <= 7.2.1
Fixed in
7.3.0

Check your project: bundle info openc3

Sources

CWE-94 Improper Control of Generation of Code ('Code Injection')

← All critical vulnerabilities