GitHub advisory GHSA-vm9q-mf35-jwpx
OS Command Injection in Yeoman-UI / Application Wizard Extension for VS Code
MediumCVSS 5.9yeoman-ui
- CVE(s)
- CVE-2026-89116
- CVSS vector
- CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:N
Affected products and versions
- Library yeoman-ui
Versions: <=1.25.1
Appears in
Patch Days listing this note, newest first.
- October 2026NewMediumCVSS 5.9