#ArchivePath
CVE-2026-110639 - @mborne/extract
The @mborne/extract library, versions before 0.2.1, can be tricked into executing arbitrary system commands when an attacker controls the archivePath or targetDir settings. This could…

Too many irrelevant or confusing CVEs? Use stackflag.com

#mborne #CVE #infosec
CVE-2026-110639: @mborne/extract lets attackers run commands on server
The @mborne/extract library, versions before 0.2.1, can be tricked into executing arbitrary system commands when an attacker controls the archivePath or.
stackflag.com
October 14, 2026 at 4:00 PM
Recht wörtlich genommen sieht unser täglicher #ArchivePath etwa so aus. Momentan ist das Gelände allerdings ziemlich ruhig 😕 #archive30 #closedbutopen
November 22, 2024 at 8:35 AM
OK, I guess this will have to be enough for getting a quick build of an app ready without having to risk my credentials on a random GitHub user.

Will later have to test whether it's building the executable for the correct kind of distribution in the archive step.
February 23, 2025 at 11:59 AM