https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-16T19:35:17.353141+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2018-16872 cnvd-2018-16872 2026-10-16T19:35:17.419713+00:00 cnvd-2018-16872 https://cve.radiocsirt.org/vuln/euvd-2026-167046 EUVD-2026-167046 2026-10-16T19:35:17.419752+00:00 EUVD-2026-167046 https://cve.radiocsirt.org/vuln/fkie_cve-2018-3786 fkie_cve-2018-3786 2026-10-16T19:35:17.419767+00:00

A command injection vulnerability in egg-scripts <v2.8.1 allows arbitrary shell command execution through a maliciously crafted command line argument.

 https://cve.radiocsirt.org/vuln/ghsa-c9j3-wqph-5xx9 GHSA-c9j3-wqph-5xx9 — Command Injection in egg-scripts 2026-10-16T19:35:17.419797+00:00

Affected: npm: egg-scripts

Versions of `egg-scripts` before 2.8.1 are vulnerable to command injection. This is only exploitable if a malicious argument is provided on the command line.

Example: `eggctl start --daemon --stderr='/tmp/eggctl_stderr.log; touch /tmp/malicious'`

## Recommendation

Update to version 2.8.1 or later.

 https://cve.radiocsirt.org/vuln/gsd-2018-3786 gsd-2018-3786 2026-10-16T19:35:17.419848+00:00 gsd-2018-3786