CVE record · 1 source
CVE-2026-110647
CVSS 7.8Turnpress through 0.4.2 contains an OS command injection vulnerability that allows attackers to execute shell commands by supplying .docx files with…
- CVSS
- 7.8
Coverage
1Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.
-
Turnpress through 0.4.2 contains an OS command injection vulnerability that allows attackers to execute shell commands by supplying .docx files with…
Turnpress through 0.4.2 contains an OS command injection vulnerability that allows attackers to execute shell commands by supplying .docx files with crafted names. The convertDocxToHtml function in src/converter.ts invokes pandoc…