CVE-2026-78847

An issue in gray-matter All versions verified on 4.0.3 allows the JavaScript engine in lib/engines.js using eval to parse front matter when language is js/javascript.This allows arbitrary code execution...

CVE-2026-78847

CVE-2026-78847 affects all versions of the gray-matter npm package (verified on 4.0.3). The vulnerability resides in lib/engines.js , where the JavaScript engine uses eval() to parse front matter when the specified language is js or javascript. This allows arbitrary code execution by an attacker ...

CVE-2026-78847

An issue in gray-matter All versions verified on 4.0.3 allows the JavaScript engine in lib/engines.js using eval to parse front matter when language is js/javascript.This allows arbitrary code execution...