CVE-2026-3965
1 advisory.
npm/@whyour/qinglong CVE-2026-3965: medium 6.3, EPSS 0.48%
@whyour/qinglong: manipulation of the argument command leads to protection mechanism failure
Action: Upgrade @whyour/qinglong to 2.20.2 or later.
npm i @whyour/qinglong@2.20.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.20.2 | - |
Fixed versions
| 2.20.2 |
Sources
- osv: GHSA-xj37-qjg2-xwv2
- https://nvd.nist.gov/vuln/detail/CVE-2026-3965
- https://github.com/A7cc/cve/issues/6
- https://github.com/A7cc/cve/issues/6#issue-3999235307
- https://github.com/whyour/qinglong/pull/2941
- https://github.com/whyour/qinglong/commit/6bec52dca158481258315ba0fc2f11206df7b719
- https://github.com/whyour/qinglong
- https://github.com/whyour/qinglong/releases/tag/v2.20.2
- https://vuldb.com/?ctiid.350394
- https://vuldb.com/?id.350394
- https://vuldb.com/?submit.768861
CVE-2026-3965 · published · modified · JSON