CVE-2026-72883: Typescript Exec Template Command Injection
Unsanitized variables interpolated into command string template literals or shell options can lead to OS command injection. Avoid string interpolation when executing commands via SSH exec or shell spawn, and pass structured argument arrays instead.
TSgreprules fetch cve-2026-72883-typescript-exec-template-command-injection --engine opengrepDescription
Unsanitized variables interpolated into command string template literals or shell options can lead to OS command injection. Avoid string interpolation when executing commands via SSH exec or shell spawn, and pass structured argument arrays instead.
Community feedback
0 rule-level signals from signed-in users.
- Useful reports
- 0
- Context false positives
- 0
- Metadata suggestions
- 0
Contextual precision
Aggregated from approved scan feedback. False-positive reports describe observed scan contexts, not a global rule verdict.
- Findings observed
- 0
- Projects
- 0
- Reporters
- 0
Precision details are collecting more signed-in reports before verdict counts or ratios are emphasized.
No approved finding verdicts yet.
No scan diagnostics reported yet.