VDB
CVE-2026-112943
CVE-2026-112943
PUBLISHED
CVSS 6.300000190734863 MEDIUM
launch-editor: escapeCmdArgs() omits % escaping on Windows
EPSS 0.41% · 35.7th percentile
Risk Scores
CVSS 4.0
6.300000190734863
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N
EPSS Score
0.41%
35.7th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| chainguard | gitlab-rails-ce-19.3 | 0 |
| vitejs | vite | 8.2.0, 0, 7.0.0 |
| wolfi | kubeflow-pipelines | 0 |
| chainguard | nextcloud-server-33 | 0 |
| npm | launch-editor | |
| chainguard | gitlab-rails-ce-19.4 | 0 |
| chainguard | nextcloud-server-34 | 0 |
| vitejs | vite-plus | 0 |
| chainguard | langfuse-4 | 0 |
| chainguard | arangodb-3.12 | 0 |
| chainguard | langfuse-3 | 0 |
| vitejs | launch-editor | 0 |
| wolfi | nextcloud-server-33 | 0 |
| chainguard | gitlab-rails-ce-fips-19.2 | 0 |
| chainguard | nextcloud-server-35 | 0 |
| npm | launch-editor | 0 |
| chainguard | gitlab-rails-ce-19.2 | 0 |
| chainguard | langfuse-fips-4 | 0 |
| chainguard | gitlab-rails-ce-19.5 | 0 |
| chainguard | langfuse-fips-3 | 0 |
…and 4 more
Timeline
- Oct 20, 2026 CVE Published
- Oct 21, 2026 EPSS Score
- Oct 25, 2026 EPSS Score
- Oct 27, 2026 EPSS Score
- Oct 29, 2026 EPSS Score
- Oct 31, 2026 Security Advisory
References
- https://nvd.nist.gov/vuln/detail/CVE-2026-112943 advisory
- https://github.com/advisories/GHSA-698v-4r3x-3vcv advisory
- https://github.com/vitejs/launch-editor/security/advisories/GHSA-698v-4r3x-3vcv url
- https://github.com/vitejs/launch-editor/pull/155 patch
- https://github.com/vitejs/launch-editor/commit/3c2f9bf2ff8fe63d056a8f9cc52d825b66ca79fc patch
- https://github.com/vitejs/launch-editor/releases/tag/v2.14.2 url