LA
Product
launch-editor
5
CVEs
0
On KEV
8.3
Max CVSS
3
New 30D
Severity mix
Critical 0High 2Medium 3Low 0
Watch
Add launch-editor to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-52011 | 8.3 | Jun 1 | launch-editor vulnerable to command injection via the crafted request on Windows Affected: < 2.9.0 |
| CVE-2026-112942 | 7.5 | Oct 20 | launch-editor: `fs.existsSync()` existence check can be bypassed on Windows Affected: < 2.14.2 |
| CVE-2026-112944 | 6.3 | Oct 20 | launch-editor: Editor CLI flag misinterpretation causing arbitrary command execution for some editors Affected: < 2.14.2 |
| CVE-2026-112943 | 6.3 | Oct 20 | launch-editor: escapeCmdArgs() omits % escaping on Windows Affected: < 2.14.2 |
| CVE-2026-53632 | 5.5 | Jun 22 | NTLMv2 hash disclosure via UNC path handling on Windows Affected: < 2.14.1 |
Showing 5