https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-25T11:26:23.909957+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2020-37911 cnvd-2020-37911 2026-10-25T11:26:23.913066+00:00 cnvd-2020-37911 https://cve.radiocsirt.org/vuln/euvd-2026-38076 EUVD-2026-38076 2026-10-25T11:26:23.913098+00:00 EUVD-2026-38076 https://cve.radiocsirt.org/vuln/fkie_cve-2020-7633 fkie_cve-2020-7633 2026-10-25T11:26:23.913112+00:00

apiconnect-cli-plugins through 6.0.1 is vulnerable to Command Injection.It allows execution of arbitrary commands via the pluginUri argument.

 https://cve.radiocsirt.org/vuln/ghsa-c9m9-48pw-6mpv GHSA-c9m9-48pw-6mpv — apiconnect-cli-plugins vulnerable to OS Command Injection 2026-10-25T11:26:23.913137+00:00

Affected: npm: apiconnect-cli-plugins

apiconnect-cli-plugins through 6.0.1 is vulnerable to Command Injection. It allows execution of arbitrary commands via the `pluginUri` argument.

### PoC ```js var root = require("apiconnect-cli-plugins"); var payload = "& touch Song &"; root.pluginLoader.installPlugin(payload, ""); ```

The injection point is located in line 181 of file `lib/plugin-loader.js`, in the function `installPlugin(pluginUri, registryUri)`.

 https://cve.radiocsirt.org/vuln/gsd-2020-7633 gsd-2020-7633 2026-10-25T11:26:23.913163+00:00 gsd-2020-7633