CVE-2026-19284

A security vulnerability has been detected in MauricioMilano coder-api up to 1.1.0. Affected is the function createProject of the file src/core/projects.ts of the component Projects Endpoint. The manipulation leads to command injection. The attack must be carried out locally. The project was...

PT-2026-69197

Name of the Vulnerable Software and Affected Versions MauricioMilano coder-api versions prior to 1.1.1 Description Command injection is possible within the Projects Endpoint component. The issue resides in the createProject function located in the src/core/projects.ts file. This flaw allows a loc...

CVE-2026-19284: Improper Neutralization of Special Elements used in a Command

A security vulnerability has been detected in MauricioMilano coder-api up to 1.1.0. Affected is the function createProject of the file src/core/projects.ts of the component Projects Endpoint. The manipulation leads to command injection. The attack must be carried out locally. The project was...