Skip to content

PatchFirst · Latest vulnerabilities

replicator vulnerabilities

Vulnerabilities published for replicator in the last 30 days: 0. Listed in the KEV catalogue: 0.

RSS ↗ JSON ↗

Vulnerabilities: 2

CVE-2026-2265
Medium · CVSS 6.5EPSS 0.4%No fix published
Replicator 1.0.5 is vulnerable to Remote Code Execution through Insecure Deserialization
An unauthenticated remote code execution (RCE) vulnerability exists in applications that use the Replicator node package manager (npm) version 1.0.5 to deserialize untrusted user input and execute the resulting object.
replicator Node.js
Published April 1, 2026Updated April 1, 2026
Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗
CVE-2021-33420
Critical · CVSS 9.8EPSS 1.71%Fix available
CVE-2021-33420
A deserialization issue discovered in inikulin replicator before 1.0.4 allows remote attackers to run arbitrary code via the fromSerializable function in TypedArray object.
replicator Node.js
- Update to 1.0.4
Published December 15, 2022Updated April 21, 2025
Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

Check your server

Check your installed stack and versions against the current vulnerability feeds.

Check your server →