CWE-94

Everything Shell Bulletin has reported about CWE-94: 2 stories, newest first. Part of our Vulnerabilities coverage.

Block Remote Code Execution in openapi-typescript-codegen Before Version 0.31.0

A critical injection flaw in openapi-typescript-codegen allows attackers to run arbitrary JavaScript via malicious API definitions, risking full system compromise.

Oct 11, 2026

Vulnerabilities

Fix dot-access npm CVE-2026-107700 to prevent attackers from executing OS commands on Node.js servers

A critical flaw in the dot-access npm library allows attackers to run operating system commands on Node.js servers through crafted inputs.

Oct 9, 2026