npm/launch-editor CVE-2026-112943: medium 6.3

launch-editor: escapeCmdArgs() omits % escaping on Windows

Action: Upgrade launch-editor to 2.14.2 or later.

npm i launch-editor@2.14.2

Affected

Fixed versions

Sources

• osv: GHSA-698v-4r3x-3vcv
• nvd: CVE-2026-112943
• https://github.com/vitejs/launch-editor/security/advisories/GHSA-698v-4r3x-3vcv
• https://github.com/vitejs/launch-editor/pull/155
• https://github.com/vitejs/launch-editor/commit/3c2f9bf2ff8fe63d056a8f9cc52d825b66ca79fc
• https://github.com/vitejs/launch-editor
• https://github.com/vitejs/launch-editor/releases/tag/v2.14.2

CVE-2026-112943 · published 2026-10-20T18:30:24Z · modified 2026-10-20T18:45:09.467993691Z · JSON