CVE-2026-2265 — Replicator 1.0.5 is vulnerable to Remote Code Execution through Insecure Deserialization
An unauthenticated remote code execution (RCE) vulnerability exists in applications that use the Replicator node package manager (npm) version 1.0.5 to deserialize untrusted use…
Published: 2026-04-01 · CVSS: 6.5 · CVSS 3.1
An unauthenticated remote code execution (RCE) vulnerability exists in applications that use the Replicator node package manager (npm) version 1.0.5 to deserialize untrusted user input and execute the resulting object.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7