CVE ID :CVE-2026-107700 Published : Oct. 8, 2026, 6:36 p.m. | 52 minutes ago Description :dot-access 0.0.3 through 1.0.0 contains a code injection vulnerability that allows remote attackers to execute JavaScript by supplying crafted paths to get(). The path is concatenated into a new Function...

#Sicherheitslücke

Original-Artikel öffnen Zurück zur Übersicht

ARTICLEVIEW

CVE-2026-107700 - dot-access 0.0.3 through 1.0.0 Code Injection via get() Path Argument

VERWANDTEARTIKEL

USN-8910-1: libxml2 vulnerabilities

CVE-2026-106433 - Heap corruption via duplicate masterKey fields in MongoDB libmongocrypt

CVE-2026-107704 - image_optimizer 1.3.0 through 1.9.0 OS Command Injection via identify_format

CVE-2026-107701 - dot-access through 1.0.0 Prototype Pollution via set() path argument

CVE-2026-107703 - @enmaso/node-convert through 1.0.0 OS Command Injection via filepath and convertTo

CVE-2026-107699 - ppt2png through 0.0.6 OS Command Injection via input and output paths