Vulnerabilities
git-diff Library Flaw Lets Attackers Run Shell Commands with Node Privileges
A critical command injection flaw in the git-diff library for Node.js allows attackers to execute arbitrary system commands by manipulating diff inputs.
Node.js
Everything RedTeam Monitor has reported about Node.js: 5 stories, newest first. Part of our Vulnerabilities coverage.
Vulnerabilities
CVE-2026-107700: dot-access Path Manipulation Triggers Critical OS Command Execution on Node.js
A critical flaw in the dot-access library allows attackers to run arbitrary OS commands on Node.js servers through crafted inputs.
Vulnerabilities
CVE-2026-107699: Attackers Execute System Commands in ppt2png via Path Injection
A critical vulnerability in the ppt2png Node.js library allows attackers to execute arbitrary system commands via unsanitized file paths.
Vulnerabilities
Update @enmaso/node-convert Now: Critical RCE Flaw Lets Attackers Run System Commands
A severe vulnerability in a popular Node.js image conversion library allows attackers to run arbitrary system commands on servers.
Vulnerabilities
fast-jwt 6.2.0-6.2.4 Reopens Critical Token Forgery; Update to 6.3.0 Now
A flawed update in the fast-jwt library re-enables a critical algorithm confusion flaw, allowing attackers to forge authentication tokens using public keys.