npm/launch-editor CVE-2024-52011: high 8.3, EPSS 0.51%
launch-editor vulnerable to command injection via the crafted request on Windows
Action: Upgrade launch-editor to 2.9.0 or later.
npm i launch-editor@2.9.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.9.0 | - |
Fixed versions
| 2.9.0 |
Sources
- osv: GHSA-c27g-q93r-2cwf
- nvd: CVE-2024-52011
- https://github.com/vitejs/launch-editor/security/advisories/GHSA-c27g-q93r-2cwf
- https://github.com/yyx990803/launch-editor/security/advisories/GHSA-c27g-q93r-2cwf
- https://github.com/vitejs/launch-editor/commit/971291e8a6a91226e1616c5c0ec85423d2d50a5e
- https://github.com/vitejs/launch-editor
CVE-2024-52011 · published · modified · JSON