Files

1 line
523 B
JSON

{"ghsa": "GHSA-vv9j-gjw2-j8wp", "cve": "CVE-2026-42089", "repo": "yeoman/environment", "severity": "high", "cwes": ["CWE-829"], "summary": "yeoman-environment Vulnerable to Arbitrary Package Installation without User Confirmation", "fix_commit": "78d2af7e60294784b8a8b3b3b5099c6874b6a1fa", "parent_commit": "dccfd126c313afa2b33ea0c4cc39a2c242fedcd8", "vuln_files": ["src/environment-full.ts"], "vuln_lines": {"src/environment-full.ts": [229]}, "published": "2026-05-26T23:10:38Z", "source_files": 17, "scope_dirs": ["src"]}