https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T07:38:57.147523+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-351093 EUVD-2026-351093 2026-10-05T07:38:57.195081+00:00 EUVD-2026-351093 https://cve.radiocsirt.org/vuln/fkie_cve-2026-73035 fkie_cve-2026-73035 2026-10-05T07:38:57.195118+00:00

npm-check-updates through 23.0.2, fixed in commit b554b84, contains a terminal escape sequence injection vulnerability that allows an attacker to embed arbitrary terminal control characters in a dependency's package.json homepage or repository URL fields. When a developer runs ncu with the --format homepage or --format repo option, unfiltered escape sequences are written directly to the terminal, enabling malicious output manipulation or other terminal-dependent effects.

 https://cve.radiocsirt.org/vuln/ghsa-xm8c-hvjf-c5q9 GHSA-xm8c-hvjf-c5q9 2026-10-05T07:38:57.195153+00:00

npm-check-updates through 23.0.2, fixed in commit b554b84, contains a terminal escape sequence injection vulnerability that allows an attacker to embed arbitrary terminal control characters in a dependency's package.json homepage or repository URL fields. When a developer runs ncu with the --format homepage or --format repo option, unfiltered escape sequences are written directly to the terminal, enabling malicious output manipulation or other terminal-dependent effects.