Skip to content
OpenAdvisories

Vendor

enmaso

1 known vulnerabilities.

Products

@enmaso/node-convert 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2026-107703

    @enmaso/node-convert through 1.0.0 OS Command Injection via filepath and convertTo

    @enmaso/node-convert through 1.0.0 contains an OS command injection vulnerability in convert.js that allows attackers to execute shell commands via unsanitized filepath and convertTo arguments. Attackers can inject shell metacharacters or a single quote into …

    enmaso @enmaso/node-convert