CVE-2026-4092
1 advisory.
npm/@google/clasp CVE-2026-4092: high
@google/clasp vulnerable to unsafe path traversal cloning or pulling a malicious script
Action: Upgrade @google/clasp to 3.2.0 or later.
npm i @google/clasp@3.2.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 3.2.0 | - |
Fixed versions
| 3.2.0 |
Sources
- osv: GHSA-hqjg-pww4-pcgq
- https://github.com/google/clasp/security/advisories/GHSA-hqjg-pww4-pcgq
- https://nvd.nist.gov/vuln/detail/CVE-2026-4092
- https://github.com/google/clasp/pull/1109
- https://github.com/google/clasp/commit/ba6bd666fe74de54950122b5d92ecf1dcc02a9d3
- https://github.com/google/clasp
- https://github.com/google/clasp/releases/tag/v3.2.0
CVE-2026-4092 · published · modified · JSON