Skip to content
OpenAdvisories

Package · npm

replicator

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Medium 6.5
    CVE-2026-2265

    Replicator 1.0.5 is vulnerable to Remote Code Execution through Insecure Deserialization

    An unauthenticated remote code execution (RCE) vulnerability exists in applications that use the Replicator node package manager (npm) version 1.0.5 to deserialize untrusted user input and execute the resulting object.

    Replicator Replicator replicator npm
  • Critical 9.8
    CVE-2021-33420

    replicator vulnerable to Deserialization of Untrusted Data

    A deserialization issue discovered in inikulin replicator before 1.0.4 allows remote attackers to run arbitrary code via the fromSerializable function in TypedArray object.

    replicator npm