Vulnerability Database - OSV

CVE-2026-71538

github.com/cyclonedx/cyclonedx-node-npm

@cyclonedx/cyclonedx-npm: Shell Injection via Unsanitized --workspace Argument on Windows 17 Sep

Fix available
Severity - 8.5 (High)

CVE-2026-55849

github.com/cyclonedx/cyclonedx-node-npm

@cyclonedx/cyclonedx-npm: Shell Injection via Unsanitized `--workspace` Argument 08 Jul

Fix available
Severity - 8.5 (High)