Command Injection in @umijs/utils via git helper functions

github.com 2026-07-22查看中文 →

Security AdvisoryHighumijs

Affected:

@umijs/utils 4.6.03
@umijs/utils 4.6.01

Referenced CVEs: CVE-2026-16492 · 5.5

文章内图片已隐藏以节省流量 · Upgrade to Pro to view images & offline archive

This content was auto-fetched from github.com, cleaned by our LLM pipeline, and translated to English. View original.

More from this source

Frappe Desk Document-Level Unauth Access Vulnerability Fix Advisory 2026-08-08 Smarty Security Stream Bypass via stream.php://filter (CVE-2026-6299) 2026-08-08 Frappe Desk: Unauthorized Field Read Bypass Fix in document_follow 2026-08-08 Smarty secure_dir Symlink Bypass RCE: Arbitrary File Read via realpath misuse 2026-08-08 Smarty Engine Stream Wrapper Security Policy Bypass Fix and POC 2026-08-08

Offline Archive

Offline screenshot & PDF are Pro-exclusive