In breve
- CVE-2026-2265 è una vulnerabilità MEDIO (CVSS 6.5) che riguarda replicator.
- Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.40%, superiore al 34.7% delle vulnerabilità.
- Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.
| Package | Affected versions | Patched versions |
|---|
| replicator npm | ≤ 1.0.5
| No fix yet |
Description
An unauthenticated Remote Code Execution (RCE) vulnerability exists in applications that use the Replicator node package manager (npm) version 1.0.5 to deserialize untrusted user input and execute the resulting object.
NVD description
An unauthenticated remote code execution (RCE) vulnerability exists in applications that use the Replicator node package manager (npm) version 1.0.5 to deserialize untrusted user input and execute the resulting object.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free