MEDIUMnpm
GHSA-5vwr-qchf-q4pf@cyclonedx/cdxgen: Maven project scanning may allow shell command injection through repository-controlled module paths
Modified: 9/10/2026
package
npm/@cyclonedx/cdxgen
pkg:npm/%40cyclonedx/cdxgen
MEDIUM6.4npm
GHSA-hxf3-vgpm-fv9p· CVE-2024-50611CycloneDX cdxgen may execute code contained within build-related files
Modified: 2/3/2025
MEDIUMnpm
GHSA-qhh4-458h-xwh2@cyclonedx/cdxgen: Docker registry auth substring match forwards credentials to a different registry
Modified: 5/8/2026