p PatchFirst

CVE-2026-22584

CVE-2026-22584

This page contains facts from public vulnerability sources. Check the original advisory before updating.

Improper Control of Generation of Code ('Code Injection') vulnerability in Salesforce Uni2TS on MacOS, Windows, Linux allows Leverage Executable Code in Non-Executable Files.This issue affects Uni2TS: through 1.2.0.

CVSS 9.8 · Critical · EPSS 0.4% · Fix available

Published
Updated

Stack: python

Affected products and versions

  • uni2ts

    Versions
    • ≥ 0, ≤ 1.2.0: Affected (git)

    No fix published

  • uni2ts PyPI

    Versions
    • 1.1.0
    • 1.1.1
    • 1.2.0
    Affected ranges
    • ECOSYSTEM: < 2.0.0

    Update to 2.0.0

Original sources

Check your server →