Skip to content
OpenAdvisories

Vendor

adaltas

2 known vulnerabilities.

Products

backmeup 1 node-csv 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.8
    CVE-2026-71243

    backmeup (npm) - OS Command Injection via Backup Option Values

    The backmeup npm package assembles shell command strings by directly concatenating its option values (name, source, destination, filter) - e.g. cmd = "mkdir -p " + path.join(info.destination, info.name) + "; " - and executes the resulting string through a she…

    adaltas backmeup