Threats Tagged 'ghsa-pf92-m78r-h85c'

1 threat

Threats Tagged 'ghsa-pf92-m78r-h85c'
		Signals				Vote and star
High	8.6	EPSS 0.3%	CVE-2026-87794bestzip · Argument Injection High8.6EPSS 0.3%2026-09-09CVE-2026-87794 bestzip versions 2.2.6 and 3.0.2 contain an argument injection vulnerability in the nativeZip function that allows attackers to inject arbitrary arguments to the Info-ZIP backend. Attackers can supply a malicious destination path combined with crafted source entries to execute arbitrary commands with Node.js process privileges. Fixed in 2.2.7 and 3.0.3. EPSS 0.3%Vulnerability nfriedly #ghsa-pf92-m78r-h85c 0	CVE Database V5	2026-09-09	0

Showing 1–1 of 1 result

Stop chasing alerts. Route them.

Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.

Pro Console Lifetime · Custom feeds · Automations: email, Slack, webhooks, SIEM/MISP · API access (baseline limits)