[ Vendor · 1 CVEs ]

sindresorhus

CVEs affecting sindresorhus published in the last 30 days, plus any sindresorhus CVE on CISA's exploited list.

CVEPublishedSeverityVulnerabilitySignals
CVE-2026-119025 29 Oct 2026 CVSS 7.5 sindresorhus openopen 7.2.0 before 11.0.0 contains an OS command injection vulnerability that allows attackers to execute PowerShell code by supplying crafted URLs on…