CVE-2026-16629
1 advisory.
npm/danger CVE-2026-16629: medium 5.3, EPSS 1.08%
danger allows local OS command injection through crafted file paths
Action: Upgrade danger to 13.0.8 or later.
npm i danger@13.0.8Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 13.0.8 | - |
Fixed versions
| 13.0.8 |
Sources
- osv: GHSA-3x93-p86w-5jvh
- https://nvd.nist.gov/vuln/detail/CVE-2026-16629
- https://github.com/danger/danger-js/pull/1513
- https://github.com/danger/danger-js/commit/087a7290264cc6fb7154ea8c2552a7b2cb8b33a3
- https://github.com/danger/danger-js
- https://github.com/danger/danger-js/releases/tag/13.0.8
- https://vuldb.com/cve/CVE-2026-16629
- https://vuldb.com/submit/860211
- https://vuldb.com/vuln/382377
- https://vuldb.com/vuln/382377/cti
CVE-2026-16629 · published · modified · JSON