enmaso

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

enmaso records in CISA KEV

No enmaso vulnerabilities are listed in CISA KEV.

Records

1 record

TI-2026-69721 CVE-2026-107703

@enmaso/node-convert OS Command Injection via filepath and convertTo

HIGH 81

@enmaso/node-convert through 1.0.0 contains an OS command injection vulnerability in convert.js that allows attackers to execute shell commands via unsanitized filepath and convertTo arguments.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.01846 Published 2026-10-08 No fix listed CWE-78

Open these records in search →

Critical	1
High	0
Medium	0
Low	0
No CVSS	0