Read the docs

lingdojo

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

lingdojo records in CISA KEV

No lingdojo vulnerabilities are listed in CISA KEV.

Records

2 records

TI-2026-35906 CVE-2026-48547 · GHSA-g3g7-r6qj-455p

KanaDojo < 0.1.18 Command Injection via patchNotesData.json in release.yml

Priority MEDIUM 41

KanaDojo contains a command injection vulnerability that allows an attacker with pull request access to execute arbitrary shell commands by inserting shell metacharacters into the version or changes fields of patchNotesD…

CVSS 4.0HIGH 8.5 Network Low privileges User interaction EPSS 0.0091 Published 2026-06-11 Fixed in 0.1.18 CWE-78
TI-2026-35905 CVE-2026-48546 · GHSA-mq42-j95v-p3gq

KanaDojo < 0.1.18 Sandbox Escape RCE via messages.cjs

Priority LOW 39

KanaDojo before 0.1.18 contains a sandbox escape vulnerability that allows an attacker to execute arbitrary code by exploiting the explicit passing of the global require function into a Node.js vm.runInNewContext() sandb…

CVSS 4.0HIGH 8.5 Network Low privileges User interaction EPSS 0.00487 Published 2026-06-11 Fixed in 0.1.18 CWE-693
Open these records in search →