@cyclonedx/cyclonedx-npm vulnerabilities (npm)

2 vulnerabilities.

• @cyclonedx/cyclonedx-npm npm @cyclonedx/cyclonedx-npm: Shell Injection via Unsanitized --workspace Argument on Windows CVE-2026-71538 Fix available 8.5 HighSeptember 17, 2026
• @cyclonedx/cyclonedx-npm npm @cyclonedx/cyclonedx-npm: Shell Injection via Unsanitized `--workspace` Argument CVE-2026-55849 Fix available 8.5 HighJune 19, 2026