https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-10T18:52:09.360510+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-107700 CVE-2026-107700 — dot-access 0.0.3 through 1.0.0 Code Injection via get() Path Argument 2026-10-10T18:52:09.363462+00:00

Affected: ntharim dot-access

dot-access 0.0.3 through 1.0.0 contains a code injection vulnerability that allows remote attackers to execute JavaScript by supplying crafted paths to get(). The path is concatenated into a new Function body in index.js, so attackers can reach constructor.constructor to load child_process and run operating system commands in the Node.js process.