CVE-2026-2265
Replicator 1.0.5 is vulnerable to Remote Code Execution through Insecure Deserialization
Summary
Replicator 1.0.5 is vulnerable to Remote Code Execution through Insecure Deserialization
Original description
The description as published by the source.
An unauthenticated remote code execution (RCE) vulnerability exists in applications that use the Replicator node package manager (npm) version 1.0.5 to deserialize untrusted user input and execute the resulting object.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
References
- advisory github.com
- advisory nvd.nist.gov
- package github.com
- patch github.com
- web morielharush.github.io