https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-15T14:16:44.918687+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-110641 fkie_cve-2026-110641 2026-10-15T14:16:44.940796+00:00

@runnerty/executor-decompress through 3.1.1 contains an OS command injection vulnerability that allows attackers to execute commands by supplying crafted archive file names to compress_file. Attackers who can name a file dropped into a watched directory can inject $() substitutions or unquoted shell metacharacters into shelljs exec() calls, running commands with Runnerty process privileges.

 https://db.gcve.eu/vuln/ghsa-2v4p-6p6r-gr94 GHSA-2v4p-6p6r-gr94 2026-10-15T14:16:44.940885+00:00

@runnerty/executor-decompress through 3.1.1 contains an OS command injection vulnerability that allows attackers to execute commands by supplying crafted archive file names to compress_file. Attackers who can name a file dropped into a watched directory can inject $() substitutions or unquoted shell metacharacters into shelljs exec() calls, running commands with Runnerty process privileges.