https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-24T20:25:23.213230+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2020-21083 cnvd-2020-21083 2026-10-24T20:25:23.219159+00:00 cnvd-2020-21083 https://cve.radiocsirt.org/vuln/euvd-2026-38022 EUVD-2026-38022 2026-10-24T20:25:23.219197+00:00 EUVD-2026-38022 https://cve.radiocsirt.org/vuln/fkie_cve-2020-7602 fkie_cve-2020-7602 2026-10-24T20:25:23.219218+00:00

node-prompt-here through 1.0.1 allows execution of arbitrary commands. The "runCommand()" is called by "getDevices()" function in file "linux/manager.js", which is required by the "index. process.env.NM_CLI" in the file "linux/manager.js". This function is used to construct the argument of function "execSync()", which can be controlled by users without any sanitization.

 https://cve.radiocsirt.org/vuln/ghsa-f8fh-8rgm-227h GHSA-f8fh-8rgm-227h — OS Command Injection in node-prompt-here 2026-10-24T20:25:23.219262+00:00

Affected: npm: node-prompt-here

node-prompt-here through 1.0.1 allows execution of arbitrary commands. The `runCommand()` is called by `getDevices()` function in file `linux/manager.js`, which is required by the `index. process.env.NM_CLI` in the file `linux/manager.js`. This function is used to construct the argument of function `execSync()`, which can be controlled by users without any sanitization.

 https://cve.radiocsirt.org/vuln/gsd-2020-7602 gsd-2020-7602 2026-10-24T20:25:23.219311+00:00 gsd-2020-7602