CVE-2026-27728
1 advisory.
npm/@oneuptime/common CVE-2026-27728: critical 9.9
OneUptime: OS Command Injection in Probe NetworkPathMonitor via unsanitized destination in traceroute exec()
Action: Upgrade @oneuptime/common to 10.0.7 or later.
npm i @oneuptime/common@10.0.7Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 10.0.7 | - |
Fixed versions
| 10.0.7 |
Sources
- osv: GHSA-jmhp-5558-qxh5
- https://github.com/OneUptime/oneuptime/security/advisories/GHSA-jmhp-5558-qxh5
- https://nvd.nist.gov/vuln/detail/CVE-2026-27728
- https://github.com/OneUptime/oneuptime/commit/f2cce35a04fac756cecc7a4c55e23758b99288c1
- https://github.com/OneUptime/oneuptime
CVE-2026-27728 · published · modified · JSON