CVE-2026-54545
1 advisory.
npm/@wakaru/cli CVE-2026-54545: high 7.1
@wakaru/cli arbitrary file write during bundle unpack
Action: Upgrade @wakaru/cli to 1.4.0 or later.
npm i @wakaru/cli@1.4.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.0.0 | 1.4.0 | - |
Fixed versions
| 1.4.0 |
Sources
- osv: GHSA-7wpj-vvmv-pgm8
- https://github.com/pionxzh/wakaru/security/advisories/GHSA-7wpj-vvmv-pgm8
- https://github.com/pionxzh/wakaru/commit/1d30383b20a6f768786b8ada2f1b0945de13c316
- https://github.com/pionxzh/wakaru
- https://github.com/pionxzh/wakaru/releases/tag/v1.4.0
CVE-2026-54545 · published · modified · JSON