CVE-2024-27763

Name of the Vulnerable Software and Affected Versions: XPixelGroup BasicSR versions 1.4.2 and earlier

Description: The issue might locally allow code execution in specific situations where scontrol show hostname is executed with a crafted SLURM NODELIST environment variable.

Recommendations: For XPixelGroup BasicSR versions 1.4.2 and earlier, consider restricting the execution of scontrol show hostname to prevent potential code execution in the presence of a crafted SLURM NODELIST environment variable. At the moment, there is no information about a newer version that contains a fix for this vulnerability.