Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Vendor: lingdojo Clear all filters
TI-2026-35906 CVE-2026-48547 · GHSA-g3g7-r6qj-455p

KanaDojo < 0.1.18 Command Injection via patchNotesData.json in release.yml

Priority MEDIUM 41

KanaDojo contains a command injection vulnerability that allows an attacker with pull request access to execute arbitrary shell commands by inserting shell metacharacters into the version or changes fields of patchNotesD…

CVSS 4.0HIGH 8.5 Network Low privileges User interaction EPSS 0.0091 Published 2026-06-11 Fixed in 0.1.18 CWE-78
TI-2026-35905 CVE-2026-48546 · GHSA-mq42-j95v-p3gq

KanaDojo < 0.1.18 Sandbox Escape RCE via messages.cjs

Priority LOW 39

KanaDojo before 0.1.18 contains a sandbox escape vulnerability that allows an attacker to execute arbitrary code by exploiting the explicit passing of the global require function into a Node.js vm.runInNewContext() sandb…

CVSS 4.0HIGH 8.5 Network Low privileges User interaction EPSS 0.00487 Published 2026-06-11 Fixed in 0.1.18 CWE-693