VYPR

npm-check-updates

by Npm

npm: npm-check-updates

CVEs (1)

  • CVE-2026-73035MedAug 10, 2026
    risk 0.21cvss 4.3epss 0.00

    npm-check-updates through 23.0.2, fixed in commit b554b84, contains a terminal escape sequence injection vulnerability that allows an attacker to embed arbitrary terminal control characters in a dependency's package.json homepage or repository URL fields. When a developer runs…