Enmaso @enmaso/node-convert vulnerabilities

• enmaso @enmaso/node-convert @enmaso/node-convert through 1.0.0 OS Command Injection via filepath and convertTo CVE-2026-107703 9.3 CriticalOctober 8, 2026