VDB
MAL-2026-11504
MAL-2026-11504
PUBLISHED
CVSS 8.600000381469727 HIGH
Malicious code in accounts-final-form (npm)
Risk Scores
CVSS 4.0
8.600000381469727
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| npm | accounts-final-form | 0.0.1, 0, 0 |
| npm | accounts-final-form |
Timeline
- Aug 3, 2026 CVE Published
- Aug 5, 2026 CVE Updated
References
- https://github.com/advisories/GHSA-2rrw-8g3r-w44h advisory
- https://www.npmjs.com/package/accounts-final-form/v/9.9.9 package
- https://www.npmjs.com/package/accounts-final-form/v/9.9.12 package
- https://www.npmjs.com/package/accounts-final-form/v/9.9.11 package
- https://www.npmjs.com/package/accounts-final-form/v/34.2.5 package
- https://www.npmjs.com/package/accounts-final-form/v/12.5.5 package
- https://www.npmjs.com/package/accounts-final-form/v/9.9.10 package
- https://www.npmjs.com/package/accounts-final-form/v/0.0.1 package