CVE-2026-22584Critical · CVSS 9.8EPSS 0.44%Fix availableCVE-2026-22584Improper Control of Generation of Code ('Code Injection') vulnerability in Salesforce Uni2TS on MacOS, Windows, Linux allows Leverage Executable Code in Non-Executable Files.This issue affects Uni2TS: through 1.2.0.uni2tsPythonUpdate to 2.0.0Published January 9, 2026Updated January 12, 2026Source advisory 1 ↗Source advisory 2 ↗