CVE-2026-48030
1 advisory.
Packagist/pheditor/pheditor CVE-2026-48030: critical 9.9, EPSS 7.55%
Pheditor: OS Command Injection in terminal handler via unsanitized 'dir' parameter
Action: Upgrade pheditor/pheditor to 2.0.4 or later.
composer require pheditor/pheditor:2.0.4Affected
| introduced | fixed | last affected |
|---|---|---|
| 2.0.1 | 2.0.4 | - |
Fixed versions
| 2.0.4 |
Sources
- osv: GHSA-jvc5-6g7q-c843
- https://github.com/pheditor/pheditor/security/advisories/GHSA-jvc5-6g7q-c843
- https://github.com/pheditor/pheditor/commit/62b43df7cb8956a9b0deb9bec278ca8676c890c5
- https://github.com/pheditor/pheditor
CVE-2026-48030 · published · modified · JSON