High severity7.8GHSA Advisory· Published May 27, 2023· Updated Jun 17, 2026
CVE-2023-26127
CVE-2023-26127
Description
All versions of the package n158 are vulnerable to Command Injection due to improper input sanitization in the 'module.exports' function. Note: To execute the code snippet and potentially exploit the vulnerability, the attacker needs to have the ability to run Node.js code within the target environment. This typically requires some level of access to the system or application hosting the Node.js environment.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
n158npm | <= 1.4.1 | — |
Affected products
3- Range: <= 1.4.1
- cpe:2.3:a:n158_project:n158:*:*:*:*:*:node.js:*:*
Patches
Vulnerability mechanics
References
5- github.com/advisories/GHSA-549h-r7g9-2qpfghsaADVISORY
- nvd.nist.gov/vuln/detail/CVE-2023-26127ghsaADVISORY
- security.snyk.io/vuln/SNYK-JS-N158-3183746nvdThird Party AdvisoryWEB
- github.com/dsilva2401/n158/blob/master/src/cli/initProject.jsghsaWEB
- github.com/dsilva2401/n158/blob/master/src/cli/initProject.js%23L8nvdBroken Link
News mentions
0No linked articles in our index yet.