Skip to content
CVE PROGRAM SOURCE RECORD6.5 Medium

CVE-2026-2265

Replicator 1.0.5 is vulnerable to Remote Code Execution through Insecure Deserialization

Description

An unauthenticated remote code execution (RCE) vulnerability exists in applications that use the Replicator node package manager (npm) version 1.0.5 to deserialize untrusted user input and execute the resulting object.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Replicator Replicator

  • 1.0.5affected

References