Components
Vulnerabilities
Pricing
MCP
Docs
Sign up
Login
Find vulnerabilities. Fix fast with AI.
Search components by package, version, or CVE to get started.
Ecosystem
Package
Version
Vulnerabilities
CVE-2026-22584
CVE-2026-22584
Improper Control of Generation of Code ('Code Injection') vulnerability in Salesforce Uni2TS on MacOS, Windows, Linux allows Leverage Executable Code in Non-Executable Files.This issue affects Uni2TS: through 1.2.0.
Published Jan 22, 2026
https://github.com/advisories/GHSA-7x99-8x99-xc54
CVSS Score
Critical
9.8
Components Impacted
Components Impacted
Security Details
Security Details
Sonatype Research
Sonatype Research
Ecosystem
Package
Version
Ecosystem
Package
Version
pypi
uni2ts
1.1.0
pypi
uni2ts
1.1.1
pypi
uni2ts
1.2.0
1-3 of 3
CVE-2026-22584 | Components Impacted | Sonatype Guide | Sonatype Guide
