CVE ID :CVE-2026-107703 Published : Oct. 8, 2026, 6:36 p.m. | 52 minutes ago Description :@enmaso/node-convert through 1.0.0 contains an OS command injection vulnerability in convert.js that allows attackers to execute shell commands via unsanitized filepath and convertTo arguments. Attackers...

#Sicherheitslücke

Original-Artikel öffnen Zurück zur Übersicht

ARTICLEVIEW

CVE-2026-107703 - @enmaso/node-convert through 1.0.0 OS Command Injection via filepath and convertTo

VERWANDTEARTIKEL

USN-8910-1: libxml2 vulnerabilities

CVE-2026-106433 - Heap corruption via duplicate masterKey fields in MongoDB libmongocrypt

CVE-2026-107704 - image_optimizer 1.3.0 through 1.9.0 OS Command Injection via identify_format

CVE-2026-107701 - dot-access through 1.0.0 Prototype Pollution via set() path argument

CVE-2026-107699 - ppt2png through 0.0.6 OS Command Injection via input and output paths

CVE-2026-107700 - dot-access 0.0.3 through 1.0.0 Code Injection via get() Path Argument