CVE-2026-2265
CVE-2026-2265 · Replicator 1.0.5 is vulnerable to Remote Code Execution through Insecure Deserialization
This page contains facts from public vulnerability sources. Check the original advisory before updating.
An unauthenticated remote code execution (RCE) vulnerability exists in applications that use the Replicator node package manager (npm) version 1.0.5 to deserialize untrusted user input and execute the resulting object.
CVSS 6.5 · Medium · EPSS 0.4%
- Published
- Updated
Stack: node
Affected products and versions
replicator
- Versions
- 1.0.5: Affected
No fix published
replicator npm
- Affected ranges
- SEMVER: ≤ 1.0.5
No fix published