Vulnerabilities
OS Command Injection in CodeCatalyst Blueprints SDK Exposes Local Merge Strategies
AWS patches CVE-2026-85012 in the @amazon-codecatalyst/blueprints.blueprint package, fixing unvalidated shell execution in version 0.3.156.
npm
Everything Packet Tribune has reported about npm: 2 stories, newest first. Part of our Vulnerabilities coverage.
Vulnerabilities
Markdown-it Denial of Service Flaw in Smartquotes Rule
A high severity vulnerability in the markdown-it library allows crafted text to cause denial of service through quadratic processing delays.