VDB

GCVE-110-NPM-2026-032940

GCVE-110-NPM-2026-032940
Advisory Published
Vulnetix · Advisory published July 11, 2026
[G-SED-EXEC] GNU sed e command (executes pattern space as shell command) — matched: `,`ig`);t=t.trim().replace(r,``).replace(/'/gm,`"`),e.debug(`Detecting diagram directive${n===null?``:` type:`+n} based on the text:${t}`);let a,o=[];for(;(a=i.exec(t))!==null;)if(a.index===i.lastIndex&&i.lastIndex++,a&&!n||n&&a[1]?.match(n)||n&&a[2]?.match(n)){let e=a[1]?a[1]:a[2],t=a[3]?a[3].trim(

Weaknesses (CWE)

CWE-506Embedded Malicious Code

Affected Products

VendorProductVersionsPlatforms
npmdifit* (affected)

References

advisory
web

Browse GCVE Records

74,299 records in the GCVE database · Updated July 22, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

$ Console Community · 100/wk Open console ›