Threats affecting pkg:github/czx1111/univer

2 threats

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Critical	9.8	EPSS 0.8%	CVE-2026-88405univer · Remote Code Execution (RCE) Vulnerability Critical9.8EPSS 0.8%2026-09-21GCVE DatabaseCVE-2026-88405 A remote code execution (RCE) vulnerability exists in the RemoteRegisterFunctionService function of Univer version 1.0.0-alpha.2. This flaw allows attackers to execute arbitrary code by sending a crafted payload to the affected service. EPSS 0.8%Report on CVE-2026-88405 Vulnerability #ghsa-c4rf-xpw9-chfc	GCVE Database	2026-09-21
Critical	9.8	EPSS 0.8%	CVE-2026-88404univer · CVE-2026-88404 is a critical remote code execution Critical9.8EPSS 0.8%2026-09-21CVE Database V5CVE-2026-88404 CVE-2026-88404 is a critical remote code execution vulnerability in Univer version 1.0.0-alpha.2. It exists in the UniscriptExecutionService.execute() function, allowing attackers to execute arbitrary code by sending a crafted payload. The vulnerability has a CVSS score of 9.8, indicating high impact on confidentiality, integrity, and availability. EPSS 0.8%Vulnerability CWE-94	CVE Database V5	2026-09-21

Page 1 of 1