backmeup vulnerabilities

1 known vulnerability in backmeup from Adaltas. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  backmeup: Improper Neutralization of Special Elements used in an OS Command

  CVE-2026-71243Aug 5, 2026Adaltas

  The backmeup npm package assembles shell command strings by directly concatenating its option values (name, source, destination, filter) - e.g. cmd = "mkdir -p " + path.join(info.destination, info.name) + "; " - and executes the resulting string through a shel