What’s Vulnerable › Products

cyclonedx-node-npm vulnerabilities

2 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 2 published in the last 12 months.

Check whether your cyclonedx-node-npm version is affected

Latest cyclonedx-node-npm vulnerabilities

• CVE-2026-71538 — @cyclonedx/cyclonedx-npm: Shell Injection via Unsanitized --workspace Argument on Windows (CVSS 8.5)
• CVE-2026-55849 — @cyclonedx/cyclonedx-npm: Shell Injection via Unsanitized `--workspace` Argument (CVSS 8.5)