Slyde vulnerabilities

1 known vulnerability in Slyde from Tygo-van-den-Hurk. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  Slyde: Inclusion of Functionality from Untrusted Control Sphere

  CVE-2026-26974Feb 20, 2026Tygo-van-den-Hurk

  Slyde is a program that creates animated presentations from XML. In versions 0.0.4 and below, Node.js automatically imports **/*.plugin.{js,mjs} files including those from node_modules, so any malicious package with a .plugin.js file can execute arbitrary code