Skip to content
OpenAdvisories

Vendor

jeemok

1 known vulnerabilities.

Products

better-npm-audit 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.8
    CVE-2026-57998

    better-npm-audit OS Command Injection via registry flag

    better-npm-audit through 3.11.0, and the 4.0.0-rc.2 prerelease, builds its npm audit command by interpolating the user-supplied --registry option into a command string in src/handlers/handleInput.ts without validation or quoting, then passes that string to ch…

    jeemok better-npm-audit