https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-19T23:09:20.892725+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2019-01301 cnvd-2019-01301 2026-10-19T23:09:20.896532+00:00 cnvd-2019-01301 https://cve.radiocsirt.org/vuln/euvd-2026-68134 EUVD-2026-68134 2026-10-19T23:09:20.896568+00:00 EUVD-2026-68134 https://cve.radiocsirt.org/vuln/fkie_cve-2018-16462 fkie_cve-2018-16462 2026-10-19T23:09:20.896583+00:00

A command injection vulnerability in the apex-publish-static-files npm module version <2.0.1 which allows arbitrary shell command execution through a maliciously crafted argument.

 https://cve.radiocsirt.org/vuln/ghsa-9jm3-5835-537m GHSA-9jm3-5835-537m — Command Injection in apex-publish-static-files 2026-10-19T23:09:20.896611+00:00

Affected: npm: apex-publish-static-files

Versions of `apex-publish-static-files` before 2.0.1 are vulnerable to command injection. This is exploitable if user input is passed into the `connectString` option in the `publish` method.

## Recommendation

Update to version 2.0.1 or later.

 https://cve.radiocsirt.org/vuln/gsd-2018-16462 gsd-2018-16462 2026-10-19T23:09:20.896636+00:00 gsd-2018-16462