VDB

GCVE-110-NPM-2026-032951

GCVE-110-NPM-2026-032951
Advisory Published
Vulnetix · Advisory published July 11, 2026
[P-PROMPT-COMMAND] PROMPT_COMMAND injection (runs on every prompt) — matched: `PROMPT_COMMAND="__shooter_osc7\${PROMPT_COMMAND:+;\$PROMPT_COMMAND}"`,

Weaknesses (CWE)

CWE-506Embedded Malicious CodeCWE-522Insufficiently Protected Credentials

Affected Products

VendorProductVersionsPlatforms
npm@juspay/shooter* (affected), * (affected), * (affected)

References

advisory
web
web

Browse GCVE Records

3,392 records in the GCVE database · Updated September 5, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

$ Console Community · 100/wk Open console ›