{"schema":"vulnpedia.research/1","cve":"CVE-2026-110639","generated":"2026-10-26T13:52:32.101Z","references":[{"url":"https://github.com/mborne/node-extract/pull/8","tags":["patch","issue-tracking"],"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-14T14:17:10.540Z","origins":[{"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-14T14:17:10.540Z","url":"https://github.com/mborne/node-extract/pull/8"},{"source":"nvd","sourceId":"CVE-2026-110639","modified":"2026-10-16T19:18:44.867","url":"https://github.com/mborne/node-extract/pull/8"}]},{"url":"https://github.com/mborne/node-extract/commit/585e5b29657379e73c04f6f950ea8dc5319f8ae1","tags":["patch"],"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-14T14:17:10.540Z","origins":[{"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-14T14:17:10.540Z","url":"https://github.com/mborne/node-extract/commit/585e5b29657379e73c04f6f950ea8dc5319f8ae1"},{"source":"nvd","sourceId":"CVE-2026-110639","modified":"2026-10-16T19:18:44.867","url":"https://github.com/mborne/node-extract/commit/585e5b29657379e73c04f6f950ea8dc5319f8ae1"}]},{"url":"https://github.com/mborne/node-extract/releases/tag/v0.2.1","tags":["release-notes"],"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-14T14:17:10.540Z","origins":[{"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-14T14:17:10.540Z","url":"https://github.com/mborne/node-extract/releases/tag/v0.2.1"},{"source":"nvd","sourceId":"CVE-2026-110639","modified":"2026-10-16T19:18:44.867","url":"https://github.com/mborne/node-extract/releases/tag/v0.2.1"}]},{"url":"https://github.com/mborne/node-extract/blob/v0.2.0/src/extractor/unzip.js#L17-L19","tags":["technical-description"],"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-14T14:17:10.540Z","origins":[{"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-14T14:17:10.540Z","url":"https://github.com/mborne/node-extract/blob/v0.2.0/src/extractor/unzip.js#L17-L19"},{"source":"nvd","sourceId":"CVE-2026-110639","modified":"2026-10-16T19:18:44.867","url":"https://github.com/mborne/node-extract/blob/v0.2.0/src/extractor/unzip.js#L17-L19"}]},{"url":"https://www.vulncheck.com/advisories/mborne-extract-before-0.2.1-os-command-injection-via-archivepath-and-targetdir","tags":["third-party-advisory"],"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-14T14:17:10.540Z","origins":[{"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-14T14:17:10.540Z","url":"https://www.vulncheck.com/advisories/mborne-extract-before-0.2.1-os-command-injection-via-archivepath-and-targetdir"},{"source":"nvd","sourceId":"CVE-2026-110639","modified":"2026-10-16T19:18:44.867","url":"https://www.vulncheck.com/advisories/mborne-extract-before-0.2.1-os-command-injection-via-archivepath-and-targetdir"}]},{"source":"euvd","sourceId":"EUVD-2026-101267","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-101267","tags":["ADVISORY"],"origins":[{"source":"euvd","sourceId":"EUVD-2026-101267","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-101267"}]}],"packages":[],"pocCandidates":[],"cataloguedPoc":[],"vendorStatements":[]}