GCVE-110-NPM-2026-034280

Advisory Published

Vulnetix · Advisory published October 4, 2026

[SA-HIGH-ENTROPY-HEREDOC] heredoc with high entropy (5.6 bits/byte, 520779 bytes)

Weaknesses (CWE)

CWE-506Embedded Malicious CodeCWE-200Exposure of Sensitive Information to an Unauthorized ActorCWE-94Improper Control of Generation of Code ('Code Injection')

Affected Products

Vendor	Product	Versions	Platforms
npm	@ryancollins7/web-agent	1.0.1 (affected)	—

References

advisory

web

Browse GCVE Records

3,112 records in the GCVE database · Updated October 5, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON