Skip to content
OpenAdvisories

Package · npm

@google/clasp

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High 8.7
    CVE-2026-4092

    Arbitrary File Write via Path Traversal in Google clasp leading to RCE

    Path Traversal in Clasp impacting versions < 3.2.0 allows a remote attacker to perform remote code execution via a malicious Google Apps Script project containing specially crafted filenames with directory traversal sequences.

    Google Clasp @google/clasp npm