Threats affecting pkg:npm/gray-matter

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Critical	9.8	EPSS 0.6%	CVE-2026-78847gray-matter · CVE-2026-78847 is a critical Critical9.8EPSS 0.6%2026-09-21CVE Database V5CVE-2026-78847 CVE-2026-78847 is a critical vulnerability in the gray-matter library affecting all versions, including 4.0.3. It involves the use of eval() in the JavaScript engine within lib/engines.js to parse front matter when the language is set to js/javascript, enabling arbitrary code execution. EPSS 0.6%Vulnerability CWE-95	CVE Database V5	2026-09-21

Page 1 of 1 · 1 duplicate CVE record merged