VDB
GCVE-110-NPM-2026-034227
GCVE-110-NPM-2026-034227
Advisory Published
[P-DNS-EXFIL] DNS lookup with variable interpolation (possible DNS exfiltration) — matched: Promise.reject(new Error(`the local-pty provider cannot suspend host ${host}`));
Weaknesses (CWE)
CWE-506Embedded Malicious CodeCWE-200Exposure of Sensitive Information to an Unauthorized Actor
Affected Products
| Vendor | Product | Versions | Platforms |
|---|---|---|---|
| npm | @zgeoff/atc | 2.15.1 (affected), 2.15.2 (affected), 2.17.0 (affected), 2.20.0 (affected) | — |
Browse GCVE Records
3,142 records in the GCVE database · Updated October 5, 2026
No matching records found.
Explore Further
Investigate this vulnerability in the interactive console or download the raw GCVE record.