28 matches found
generator-burp-extension
Burp Extension Generator Installation First, install Yeoman and generator-burp-extension using npm we assume you have pre-installed node.js. root@kitploit: npm install -g yo npm install -g generator-burp-extension Then generate your new project: root@kitploit: yo burp-extension Burp Extension...
generator-burp-extension
Generador de Extensiones Burp Instalación Primero, instala Yeoman y generator-burp-extension usando npm asumimos que ya tienes preinstalado node.js. root@kitploit: npm install -g yo npm install -g generator-burp-extension Luego genera tu nuevo proyecto: root@kitploit: yo burp-extension...
CVE-2026-42089
CVE-2026-42089 A local package installation helper trusted caller-supplied package names too much. In yeoman-environment, missing generators could be installed without user confirmation, turning attacker-controlled project metadata into a package-install and code-execution path. Intro I found thi...
CVE-2026-42089
A flaw was found in Yeoman Environment. This vulnerability allows an attacker to install arbitrary packages and execute code during command-line interface CLI bootstrap. This occurs because the software installs missing local generator packages from caller-supplied names without user confirmation...
CVE-2026-42089
Yeoman Environment provides an API to discover, create, and run generators, and to configure where and how a generator is resolved. Versions 2.9.0 through 6.0.0 install missing local generator packages from caller-supplied package names without user confirmation. In downstream consumers that pass...
EUVD-2026-37131
Yeoman Environment provides an API to discover, create, and run generators, and to configure where and how a generator is resolved. Versions 2.9.0 through 6.0.0 install missing local generator packages from caller-supplied package names without user confirmation. In downstream consumers that pass...
CVE-2026-42089 yeoman-environment Vulnerable to Arbitrary Package Installation without User Confirmation
Yeoman Environment provides an API to discover, create, and run generators, and to configure where and how a generator is resolved. Versions 2.9.0 through 6.0.0 install missing local generator packages from caller-supplied package names without user confirmation. In downstream consumers that pass...
CVE-2026-42089
The CVE concerns yeoman-environment. Vulnerable versions 2.9.0 through 6.0.0 install missing local generator packages from attacker-controlled names without user confirmation, via installLocalGenerators() calling repository.install(). This can cause arbitrary package installation and code executi...
CVE-2026-42089 yeoman-environment Vulnerable to Arbitrary Package Installation without User Confirmation
Yeoman Environment provides an API to discover, create, and run generators, and to configure where and how a generator is resolved. Versions 2.9.0 through 6.0.0 install missing local generator packages from caller-supplied package names without user confirmation. In downstream consumers that pass...
20190403-utils (1.0.0), 433bf (0.0.1) +7980 more potentially affected by CVE-2026-42089 via yeoman-environment (>=2.9.5, <=6.0.0)
yeoman-environment NPM version =2.9.5, =0.0.0, =0.1.0, =1.0.1-alpha.0, =2.0.0-beta.2, =1.18.0, =4.2.0, =6.0.0, =1.0.0, =1.0.0, =0.0.0, =0.2.46, =0.24.0 and more Source cves: CVE-2026-42089 Source advisory: SNYK:JS-YEOMANENVIRONMENT-17753983...
GHSA-VV9J-GJW2-J8WP yeoman-environment Vulnerable to Arbitrary Package Installation without User Confirmation
Impact yeoman-environment versions = 2.9.0 and 6.0.1 install missing local generator packages from caller-supplied package names without user confirmation. In downstream consumers that pass attacker-controlled project configuration into this path, this can result in arbitrary package installation...
20190403-utils (1.0.0), 433bf (0.0.1) +7980 more potentially affected by CVE-2026-42089 via yeoman-environment (>=2.9.5, <=6.0.0)
yeoman-environment NPM version =2.9.5, =0.0.0, =0.1.0, =1.0.1-alpha.0, =2.0.0-beta.2, =1.18.0, =4.2.0, =6.0.0, =1.0.0, =1.0.0, =0.0.0, =0.2.46, =0.24.0 and more Source cves: CVE-2026-42089 Source advisory: OSV:GHSA-VV9J-GJW2-J8WP...
yeoman-environment Vulnerable to Arbitrary Package Installation without User Confirmation
Impact yeoman-environment versions = 2.9.0 and 6.0.1 install missing local generator packages from caller-supplied package names without user confirmation. In downstream consumers that pass attacker-controlled project configuration into this path, this can result in arbitrary package installation...
PT-2026-43442
Name of the Vulnerable Software and Affected Versions Yeoman Environment versions 2.9.0 through 6.0.0 Description Yeoman Environment provides an API to discover, create, and run generators, and to configure where and how a generator is resolved. The installLocalGenerators function calls...
MAL-2025-40457 Malicious code in yeoman-genrator (npm)
The package yeoman-genrator was found to contain malicious code...
Malicious code in yeoman-genrator (npm)
The package yeoman-genrator was found to contain malicious code...
Malicious code in yeoman-33enerator (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 46467411b04dd7b9a5c0f9063b47e48dcb506330bdcd90899e4e20e48de784e3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in yeoman-enviromenv (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c36384869fc93242a75a1c21aa58d07f3cec77dab5eaea1747b40e96b68a7e21 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-7344 Malicious code in yeoman-33enerator (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 46467411b04dd7b9a5c0f9063b47e48dcb506330bdcd90899e4e20e48de784e3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-7345 Malicious code in yeoman-enviromenv (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c36384869fc93242a75a1c21aa58d07f3cec77dab5eaea1747b40e96b68a7e21 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...