← Database

CVE-2026-2265

MEDIUM CVSS: 6.5 Published: 2026-04-01 Modified: 2026-06-17

Description

An unauthenticated remote code execution (RCE) vulnerability exists in applications that use the Replicator node package manager (npm) version 1.0.5 to deserialize untrusted user input and execute the resulting object.

Affected Platforms

Unknown

Weakness Type

Unknown

References