Skip to content

Arcane Has a Command Injection in Arcane Updater Lifecycle Labels That Enables RCE

Critical severity GitHub Reviewed Published Jan 15, 2026 in getarcaneapp/arcane • Updated Jan 15, 2026

No closed alerts for this advisory

Give feedback on Dependabot alerts