Skip to content
OpenAdvisories

Product · enmaso

@enmaso/node-convert

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2026-107703

    @enmaso/node-convert through 1.0.0 OS Command Injection via filepath and convertTo

    @enmaso/node-convert through 1.0.0 contains an OS command injection vulnerability in convert.js that allows attackers to execute shell commands via unsanitized filepath and convertTo arguments. Attackers can inject shell metacharacters or a single quote into …

    enmaso @enmaso/node-convert