CVE-2026-2265
Replicator 1.0.5 is vulnerable to Remote Code Execution through Insecure Deserialization
概要
Replicator 1.0.5 is vulnerable to Remote Code Execution through Insecure Deserialization
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
An unauthenticated remote code execution (RCE) vulnerability exists in applications that use the Replicator node package manager (npm) version 1.0.5 to deserialize untrusted user input and execute the resulting object.
出典: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
参照URL
- advisory github.com
- advisory nvd.nist.gov
- package github.com
- patch github.com
- web morielharush.github.io