npm/network-ai CVE-2026-58414: medium 5.5, EPSS 0.19%
Network-AI: EnvironmentManager.backup() follows symlinked directories and copies files outside the environment root into backups
Action: Upgrade network-ai to 5.12.2 or later.
npm i network-ai@5.12.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 5.12.2 | - |
Fixed versions
| 5.12.2 |
Sources
- osv: GHSA-6x2m-p4xp-wg22
- https://github.com/Jovancoding/Network-AI/security/advisories/GHSA-6x2m-p4xp-wg22
- https://github.com/Jovancoding/Network-AI/commit/a59c13a1f0ce0e8a0779a90343eef92fac5ab4c3
- https://github.com/Jovancoding/Network-AI
- https://github.com/Jovancoding/Network-AI/releases/tag/v5.12.2
CVE-2026-58414 · published · modified · JSON