GCVE-110-NPM-2026-033754

Advisory Published

Vulnetix · Advisory published September 4, 2026

[P-EVAL-BASE64] Base64-decoded payload executed via eval — matched: import { DocumentFormatSchema, OdbReportNotSpecifiedError, OdmUnresolvedSectionError, UnrecognizedDocumentSchemaError, base64ToBytes, buildDocumentBytes, bytesToBase64, createLocalDocumentConverter, decodeOdbPackage, decodePackage, describeFontFace, documentFromJson, documentSchemaKindOf, evaluateSe

Download JSON Open in Console

Weaknesses (CWE)

CWE-506Embedded Malicious Code

Affected Products

Vendor	Product	Versions	Platforms
npm	document-mcp	4.4.0 (affected)	—

References

advisory

web

Browse GCVE Records

3,045 records in the GCVE database · Updated September 6, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON