Vulnerability GHSA-gv8f-wpm2-m5wr
Advisory details are being prepared in the background.
High Risk
HIGH RISK
CVSS Score: 8.0
Score Range: 7.0–8.9
High severity vulnerabilities (CVSS 7.0–8.9). Serious vulnerabilities that should be prioritized soon after critical fixes.
8 months ago
March 11, 2026 at 12:37 AM UTC
@siteboon/claude-code-ui Vulnerable to Unauthenticated RCE via WebSocket Shell Injection
1.8.2 - 1.24.0
1.8.2 - 1.24.0
Related Vulnerabilities
Other vulnerabilities affecting the same packages
Critical
8 months ago
@siteboon/claude-code-ui is Vulnerable to Command Injection via Multiple Parameters
1.8.2 - 1.23.2 GHSA-f2fc-vc88-6w7q
1.8.2 - 1.23.2 GHSA-f2fc-vc88-6w7q
High Risk
8 months ago
@siteboon/claude-code-ui is Vulnerable to Shell Command Injection in Git Routes
1.8.2 - 1.23.2 GHSA-7fv4-fmmc-86g2
1.8.2 - 1.23.2 GHSA-7fv4-fmmc-86g2
Impacted packages
Timeline
Published
8 months ago
March 11, 2026 at 12:37 AM UTC
Fixed (1.25.0)
8 months ago
March 10, 2026 at 04:27 PM UTC
Last Modified
7 months ago
March 13, 2026 at 10:56 AM UTC