THREATOPS

THREAT OPS › Threat News › [GHSA] GHSA-m835-3cm9-rggg (high) — Joker linter executed project-local .jokerd/linter.* files during linting

[GHSA] GHSA-m835-3cm9-rggg (high) — Joker linter executed project-local .jokerd/linter.* files during linting

medgithub_advisoriesPublished 2026-09-09

GHSA-m835-3cm9-rggg Severity: high CVE: CVE-2026-59172

Joker linter executed project-local .jokerd/linter.* files during linting

## Impact

In Joker versions before 1.8.2, `joker --lint <file>` located a `.jokerd/` directory by walking up from the linted file and executed matching `linter.*` files from that directory before linting. Because these files are executable Joker/Clojure code, linting

Indicators of compromise

CVE-2026-59172cve

Original source: https://github.com/advisories/GHSA-m835-3cm9-rggg