Post
STACKFLAG
stackflag.bsky.social
did:plc:zhe53h7ajlloep2oso5pqxzj
CVE-2026-110639 - @mborne/extract
The @mborne/extract library, versions before 0.2.1, can be tricked into executing arbitrary system commands when an attacker controls the archivePath or targetDir settings. This could…
Too many irrelevant or confusing CVEs? Use stackflag.com
#mborne #CVE #infosec
https://stackflag.com/vulnerabilities/cve-2026-110639-mborne-extract?utm_source=bluesky&utm_medium=social&utm_campaign=cve_poster&utm_content=cve-2026-110639
2026-10-14T16:00:06.664Z