CVE-2026-2265
Replicator 1.0.5 is vulnerable to Remote Code Execution through Insecure Deserialization
Résumé
Replicator 1.0.5 is vulnerable to Remote Code Execution through Insecure Deserialization
Description d'origine
La description telle que publiée par la source (souvent en anglais).
An unauthenticated remote code execution (RCE) vulnerability exists in applications that use the Replicator node package manager (npm) version 1.0.5 to deserialize untrusted user input and execute the resulting object.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Références
- advisory github.com
- advisory nvd.nist.gov
- package github.com
- patch github.com
- web morielharush.github.io