https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-27T23:41:29.668536+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2020-02929 bdu:2020-02929 2026-10-27T23:41:29.672695+00:00 bdu:2020-02929 https://cve.radiocsirt.org/vuln/cnvd-2020-35510 cnvd-2020-35510 2026-10-27T23:41:29.672732+00:00 cnvd-2020-35510 https://cve.radiocsirt.org/vuln/euvd-2026-38046 EUVD-2026-38046 2026-10-27T23:41:29.672747+00:00 EUVD-2026-38046 https://cve.radiocsirt.org/vuln/fkie_cve-2020-7628 fkie_cve-2020-7628 2026-10-27T23:41:29.672760+00:00

umount through 1.1.6 is vulnerable to Command Injection. The argument device can be controlled by users without any sanitization.

 https://cve.radiocsirt.org/vuln/ghsa-6q48-vjq2-mwcj GHSA-6q48-vjq2-mwcj — Command Injection in umount 2026-10-27T23:41:29.672787+00:00

Affected: npm: umount

All versions of `umount ` are vulnerable to Command Injection. The package fails to sanitize input rules and passes it directly to an `exec` call on the `umount` function . This may allow attackers to execute arbitrary code in the system if the `device` value passed to the function is user-controlled.

## Recommendation

No fix is currently available. Consider using an alternative package until a fix is made available.

 https://cve.radiocsirt.org/vuln/gsd-2020-7628 gsd-2020-7628 2026-10-27T23:41:29.672813+00:00 gsd-2020-7628