epimageconvert is a plugin for Etherpad Lite. epimageconvert <= 0.0.2 is vulnerable to remote command injection.
Authentication is not required for remote exploitation.
// recommendationUpdate to version 0.0.3 or greater.
npm package report
Is ep_imageconvert safe?
1 known vulnerability.
// reach
0 direct dependencies
none carry a known advisory
0 packages depend on it
an advisory here reaches each of them
Create a free accountfor every dependency path, dependent and what to upgrade
// ai model usage
Tracked for PyPI packages. HuggingFace models declare Python dependencies, so npm packages are not covered.
cvss
not scored
severity out of 10
epss
0.00%
medium
chance of exploitation in 30 days, 90th percentile of all CVEs
xyz score
0.0
low
CyberXYZ composite out of 10
fig. 01 — GHSA-28gr-86hg-r48w, the advisory selected below
// 1 advisories
Checked 2026-10-04 at 01:10 UTC. The most recent advisory here was published 2020-08-31. Updated continuously from NVD, GHSA, OSV and CNA feeds.