{"action":"Upgrade @oneuptime/common to 10.0.18 or later.","affected":[{"fixed":"10.0.18","introduced":"0"}],"component":"@oneuptime/common","cve_ids":["CVE-2026-30887"],"ecosystem":"npm","epss":0.00411,"exploited":false,"fixed_versions":["10.0.18"],"ghsa_id":"GHSA-h343-gg57-2q67","id":"tcs_01M5KFSY5DDTTJ0XA2BCCXWA5Z","modified_at":"2026-03-10T18:48:41.920055Z","published_at":"2026-03-07T02:30:09Z","references":["https://osv.dev/vulnerability/GHSA-h343-gg57-2q67","https://github.com/OneUptime/oneuptime/security/advisories/GHSA-h343-gg57-2q67","https://nvd.nist.gov/vuln/detail/CVE-2026-30887","https://github.com/OneUptime/oneuptime"],"severity":{"label":"critical","score":9.9},"sources":[{"source":"osv","source_id":"GHSA-h343-gg57-2q67","url":"https://osv.dev/vulnerability/GHSA-h343-gg57-2q67"}],"summary":"OneUpTime's Unsandboxed Code Execution in Probe Allows Any Project Member to Achieve RCE"}