TI-2026-51244 CVE-2026-73035 · GHSA-xm8c-hvjf-c5q9
npm-check-updates 23.0.2 Terminal Injection via Unsanitized Escape Sequences
Priority LOW 24
npm-check-updates through 23.0.2, fixed in commit b554b84, contains a terminal escape sequence injection vulnerability that allows an attacker to embed arbitrary terminal control characters in a dependency's package.json…