Skip to content
OpenAdvisories

Vendor

raineorshine

1 known vulnerabilities.

Products

npm-check-updates 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 4.3
    CVE-2026-73035

    npm-check-updates 23.0.2 Terminal Injection via Unsanitized Escape Sequences

    npm-check-updates through 23.0.2, fixed in commit b554b84, contains a terminal escape sequence injection vulnerability that allows an attacker to embed arbitrary terminal control characters in a dependency's package.json homepage or repository URL fields. Whe…

    raineorshine npm-check-updates