npm/whistle CVE-2026-55629: high 8.7, EPSS 0.55%
Whistle vulnerable to path traversal
Action: Upgrade whistle to 2.10.3 or later.
npm i whistle@2.10.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.10.3 | - |
Fixed versions
| 2.10.3 |
Sources
- osv: GHSA-3vfr-4gwf-qxfp
- nvd: CVE-2026-55629
- https://github.com/avwo/whistle/security/advisories/GHSA-3vfr-4gwf-qxfp
- https://github.com/avwo/whistle/commit/777bcf69bae2972aa7138a158c91619185653cf5
- https://github.com/avwo/whistle
- http://github.com/avwo/whistle/releases/tag/v2.10.3
CVE-2026-55629 · published · modified · JSON