CVE-2026-49255
1 advisory.
npm/electerm CVE-2026-49255: high 8.8, EPSS 0.79%
electerm has Command Injection in File System Operations (rmrf, mv, cp)
Action: Upgrade electerm to 3.11.11 or later.
npm i electerm@3.11.11Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 3.11.11 | - |
Fixed versions
| 3.11.11 |
Sources
- osv: GHSA-v5ff-xmfp-p245
- https://github.com/electerm/electerm/security/advisories/GHSA-v5ff-xmfp-p245
- https://github.com/electerm/electerm/commit/aa778818843b9c083bd711cd04644d102fcb5a42
- https://github.com/electerm/electerm
CVE-2026-49255 · published · modified · JSON