@steipete/summarize (>=0.7.0, <=0.16.3), custom-command-example (>=1.3.0, <=1.3.2) potentially affected by CVE-2026-53781 via @steipete/summarize-core (>=0.7.0, <=0.16.3)

@steipete/summarize-core NPM version =0.7.0, =0.7.0, =1.3.0, =1.3.2 Source cves: CVE-2026-53781 Source advisory: OSV:GHSA-Q9XM-F36C-XM3Q...

@steipete/summarize (>=0.7.0, <=0.16.3), custom-command-example (>=1.3.0, <=1.3.2) potentially affected by CVE-2026-53781 via @steipete/summarize-core (>=0.7.0, <=0.16.3)

@steipete/summarize-core NPM version =0.7.0, =0.7.0, =1.3.0, =1.3.2 Source cves: CVE-2026-53781 Source advisory: SNYK:JS-STEIPETESUMMARIZECORE-17812779...

Allocation of Resources Without Limits or Throttling

Overview @steipete/summarize-core is a Summarize core library content extraction + prompts. Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling via the temp-file download process. An attacker can exhaust disk or system resources by streaming an...

Server-side Request Forgery (SSRF)

Overview @steipete/summarize-core is a Summarize core library content extraction + prompts. Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via the podcast:transcript URL handling process. An attacker can access internal network resources or sensitive...

@steipete/summarize (>=0.7.0, <=0.16.3), custom-command-example (>=1.3.0, <=1.3.2) potentially affected by CVE-2026-53782 via @steipete/summarize-core (>=0.7.0, <=0.16.3)

@steipete/summarize-core NPM version =0.7.0, =0.7.0, =1.3.0, =1.3.2 Source cves: CVE-2026-53782 Source advisory: SNYK:JS-STEIPETESUMMARIZECORE-17812777...