VDB
GCVE-110-NPM-2026-034804
GCVE-110-NPM-2026-034804
Advisory Published
[P-EVAL-BASE64] Base64-decoded payload executed via eval — matched: })));`),p.write(`newResult[${Ge(I)}] = ${b}.value`)}p.write("payload.value = newResult;"),p.write("return payload;");let Z=p.compile();return(I,b)=>Z(m,I,b)},r,o=at,a=!Tr.jitless,u=a&&$i.value,l=t.catchall,c;e._zod.parse=(m,p)=>{c??(c=n.value);let g=m.value;if(!o(g))return m.issues.push({expected:"o
Weaknesses (CWE)
CWE-506Embedded Malicious CodeCWE-200Exposure of Sensitive Information to an Unauthorized ActorCWE-94Improper Control of Generation of Code ('Code Injection')
Affected Products
| Vendor | Product | Versions | Platforms |
|---|---|---|---|
| npm | @vustudio/mcp-remote | 0.2.52-vu.1 (affected) | — |
Browse GCVE Records
3,090 records in the GCVE database · Updated October 12, 2026
No matching records found.
Explore Further
Investigate this vulnerability in the interactive console or download the raw GCVE record.