Sindresorhus vulnerabilities
We track 1 vulnerability in Sindresorhus products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on October 29, 2026.
1vulnerabilities
0critical
1high
0exploited
7.5average CVSS score
Latest Sindresorhus vulnerabilities
- 7.5 High severity
open: Improper Neutralization of Special Elements used in an OS Command
open 7.2.0 before 11.0.0 contains an OS command injection vulnerability that allows attackers to execute PowerShell code by supplying crafted URLs on Windows and WSL. Attackers can embed $(...) subexpressions in URLs, such as OAuth authorization_endpoint value