
EnvModules@EnvModules
Patch
Modules 5.6.2, 5.3.2 and 4.5.4 are out, fixing CVE-2026-85013: command injection in the Bash completion of module/ml via malicious module names. All versions 3.2.7 to 5.6.1 affected, please upgrade. Advisory: https://github.com/envmodules/modules/security/advisories/GHSA-8hrw-p88g-qhmg Found by AISLE in partnership with Red Hat.
Post summary
New module versions 5.6.2, 5.3.2, and 4.5.4 address CVE‑2026‑85013, a command‑injection flaw; users are advised to upgrade immediately.
00010119
143 followersView on X
