mborne

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

mborne records in CISA KEV

No mborne vulnerabilities are listed in CISA KEV.

Records

1 record

TI-2026-74133 CVE-2026-110639 · GHSA-chf7-hjrj-qwh8

OS command injection in @mborne/extract via archivePath and targetDir

MEDIUM 53

@mborne/extract before 0.2.1 contains an OS command injection vulnerability that allows attackers to execute commands by supplying shell metacharacters in archivePath or targetDir options.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.02727 Published 2026-10-14 Fixed in 0.2.1 CWE-78

Open these records in search →

Critical	1
High	0
Medium	0
Low	0
No CVSS	0