Skip to content
OpenAdvisories

Product · web-infra-dev

rsbuild

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.8
    CVE-2026-10144

    Rsbuild < 2.0.9 Command Injection via openBrowser() URL Handling

    Rsbuild before 2.0.9 contains a command injection vulnerability that allows attackers to execute arbitrary OS commands by supplying a crafted URL containing shell metacharacters to the server.open configuration on macOS. The openBrowser() function in packages…

    web-infra-dev rsbuild