Threats affecting pkg:npm/eta-otp-lock

CVE-2026-18915 is a vulnerability in the eta-otp-lock software by TÜBİTAK BİLGEM Software Technologies Research Institute that involves invocation of a process using visible sensitive information. This flaw allows system footprinting and affects versions prior to 1.0.4. The vulnerability has a medium severity rating with a CVSS score of 5. There is no official patch or remediation level currently provided by the vendor.

A deserialization of untrusted data vulnerability exists in TUBITAK BILGEM Software Technologies Research Institute's eta-otp-lock before version 1.0.4. This vulnerability allows object injection, which can lead to high impact on confidentiality, integrity, and availability. The vulnerability is tracked as CVE-2026-18642 and has a CVSS 3.1 score of 7.8, indicating high severity.