{"action":"Upgrade electerm to 3.11.11 or later.","affected":[{"fixed":"3.11.11","introduced":"0"}],"component":"electerm","cve_ids":["CVE-2026-49255"],"ecosystem":"npm","epss":0.0079,"exploited":false,"fixed_versions":["3.11.11"],"ghsa_id":"GHSA-v5ff-xmfp-p245","id":"tcs_01M5KGASTY0CDX5Y7BXV16G4NQ","modified_at":"2026-07-02T19:41:33.135414Z","published_at":"2026-07-02T19:22:31Z","references":["https://osv.dev/vulnerability/GHSA-v5ff-xmfp-p245","https://github.com/electerm/electerm/security/advisories/GHSA-v5ff-xmfp-p245","https://github.com/electerm/electerm/commit/aa778818843b9c083bd711cd04644d102fcb5a42","https://github.com/electerm/electerm"],"severity":{"label":"high","score":8.8},"sources":[{"source":"osv","source_id":"GHSA-v5ff-xmfp-p245","url":"https://osv.dev/vulnerability/GHSA-v5ff-xmfp-p245"}],"summary":"electerm has Command Injection in File System Operations (rmrf, mv, cp)"}