Vulnerabilities
@mborne/extract OS Command Injection Risks Node.js Process Privileges
A critical vulnerability in the @mborne/extract library allows attackers to execute system commands via shell metacharacters in path options.
Node.js
Everything TechSec Observer has reported about Node.js: 2 stories, newest first. Part of our Vulnerabilities coverage.
Vulnerabilities
Stills 25.24.2 Fixes Critical CVE-2026-110649 OS Command Injection Vulnerability
A critical OS command injection flaw in Stills allows attackers to execute shell commands via crafted file paths, requiring immediate updates for affected users.