PT-2026-56413 · Christopherthielen · Check-Peer-Dependencies

Dremig · Publicado 2026-07-08 · Atualizado 2026-07-08 · CVE-2026-15033

NVD

CVSS v2.0

6.5

Média

Vetor base

AV:N/AC:L/Au:S/C:P/I:P/A:P

A flaw has been found in christopherthielen check-peer-dependencies up to 4.3.4. Affected by this vulnerability is the function shelljs.exec of the file dist/packageUtils.js of the component peerDependencies. This manipulation causes os command injection. The attack may be initiated remotely. The project was informed of the problem early through an issue report but has not responded yet.

Correção

Command Injection

OS Command Injection

Enumeração de Fraquezas

CWE-77

CWE-78

Identificadores relacionados

CVE-2026-15033

Produtos afetados

Check-Peer-Dependencies

Referências · 7

• https://vuldb.com/cve/CVE-2026-15033 · Nota
• https://vuldb.com/vuln/376784/cti · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-15033 · Nota de Segurança
• https://github.com/christopherthielen/check-peer-dependencies · Nota
• https://vuldb.com/submit/850875 · Nota
• https://vuldb.com/vuln/376784 · Nota
• https://github.com/christopherthielen/check-peer-dependencies/issues/74 · Nota