Skip to content
OpenAdvisories
Critical · 9.8 CVE-2026-22584 EUVD-2026-1841GHSA-7x99-8x99-xc54PYSEC-2026-557

Salesforce Uni2TS has a Code Injection vulnerability

Published Jan 9, 2026 · Updated Jan 12, 2026 · Assigned by Salesforce

Description

Improper Control of Generation of Code ('Code Injection') vulnerability in Salesforce Uni2TS on MacOS, Windows, Linux allows Leverage Executable Code in Non-Executable Files.This issue affects Uni2TS: through 1.2.0.

Affected products

VendorProductAffectedFixed
Salesforce Uni2TS — —

Affected packages

EcosystemPackageAffectedFixedRecord
PyPI uni2ts < 2.0.0 2.0.0 GHSA-7x99-8x99-xc54

References