better-npm-audit vulnerabilities

1 known vulnerability in better-npm-audit from Jeemok. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.8 High severity

  better-npm-audit: Improper Neutralization of Special Elements used in an OS Command

  CVE-2026-57998Aug 22, 2026Jeemok

  better-npm-audit through 3.11.0, and the 4.0.0-rc.2 prerelease, builds its npm audit command by interpolating the user-supplied --registry option into a command string in src/handlers/handleInput.ts without validation or quoting, then passes that string to chi