Skip to content
Every CVE
Browse
Docs
Sources
Guide
Search
/
Get
API key
Every CVE
Vendors
Cyclonedx
Cyclonedx-node-npm
Cyclonedx Cyclonedx-node-npm vulnerabilities
cyclonedx
cyclonedx-node-npm
@cyclonedx/cyclonedx-npm: Shell Injection via Unsanitized --workspace Argument on Windows
CVE-2026-71538
Fix available
8.5
High
September 17, 2026
cyclonedx
cyclonedx-node-npm
@cyclonedx/cyclonedx-npm: Shell Injection via Unsanitized `--workspace` Argument
CVE-2026-55849
Fix available
8.5
High
June 19, 2026
esc
Pages
All vulnerabilities
Browse
Docs
Sources
Guide
Get API key
Move
Enter
Open