Vulnerabilities
9.3 CVSS Score: ppt2png npm Package Flaw Enables Remote Code Execution
A critical OS command injection flaw in ppt2png versions through 0.0.6 allows attackers to execute system commands via unsanitized path inputs.
Node.js
Everything Vector Tribune has reported about Node.js: 2 stories, newest first. Part of our Vulnerabilities coverage.
Vulnerabilities
9.3 CVSS CVE-2026-107703: Node.js @enmaso/node-convert Library Permits Arbitrary OS Command Execution
A critical flaw in the @enmaso/node-convert Node.js library allows attackers to execute arbitrary operating system commands via unsanitized image conversion arguments.