https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T19:03:18.385084+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-11274 EUVD-2026-11274 2026-10-02T19:03:18.387689+00:00 EUVD-2026-11274 https://cve.radiocsirt.org/vuln/fkie_cve-2022-0841 fkie_cve-2022-0841 2026-10-02T19:03:18.387721+00:00

OS Command Injection in GitHub repository ljharb/npm-lockfile in v2.0.3 and v2.0.4.

 https://cve.radiocsirt.org/vuln/ghsa-cr6m-62pq-hmqh GHSA-cr6m-62pq-hmqh — OS Command injection in npm-lockfile 2026-10-02T19:03:18.387751+00:00

Affected: npm: npm-lockfile

npm-lockfile safely generates an npm lockfile and output it to the filename of your choice. npm-lockfile before 2.0.4 does not santize unsafe external input and invoke sensitive command execution API with the input, causing command injection vulnerability. A fix was released in version 2.0.5.

 https://cve.radiocsirt.org/vuln/gsd-2022-0841 gsd-2022-0841 2026-10-02T19:03:18.387776+00:00 gsd-2022-0841