5 matches found
CVE-2026-69263
CVE 2026-69263 What CVE 2026-69263 is a patch bypass of the old RCE vulnerability patched back in August of 2025. The patch introduced a Denylist that blocked installation of arbitrary packages. How Since npm reads config from environment variables, setting the npmconfigyes=true environment...
9.8CVSS6.3AI score0.00475EPSS
SaveExploits4
20