{"id":"EUVD-2025-209888","enisaUuid":"7c949ebf-8202-30e9-b2ca-10c57e841bc6","description":"ngrok v4.3.3 and 5.0.0-beta.2 is vulnerable to Command Injection.","datePublished":"May 18, 2026, 12:00:00 AM","dateUpdated":"May 18, 2026, 5:23:14 PM","baseScore":8.8,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","references":"https://www.npmjs.com\nhttps://gist.github.com/Dremig/90c2a0a2f85b0921f10e0bb3192a0c23\n","aliases":"CVE-2025-57282\nGHSA-qr28-p3wr-mxq3\n","assigner":"mitre","epss":0.98,"enisaIdProduct":[{"id":"aabc116e-f2e0-3c57-a96a-96ddfe6d8b0e","product":{"name":"n/a","vendor":{"name":"n/a"}},"product_version":"n/a"}],"enisaIdVendor":[{"id":"f4bf55d2-7456-3120-bb31-e317fd35a827","vendor":{"name":"n/a"}}],"enisaIdVulnerability":[{"id":"ad0ac07a-c147-3071-bd98-2298a93c9181","vulnerability":{"id":"GHSA-qr28-p3wr-mxq3","description":"ngrok is Vulnerable to Command Injection","datePublished":"May 18, 2026, 6:31:29 PM","dateUpdated":"May 29, 2026, 7:10:32 PM","baseScore":0.0,"references":"https://nvd.nist.gov/vuln/detail/CVE-2025-57282\nhttps://gist.github.com/Dremig/90c2a0a2f85b0921f10e0bb3192a0c23\nhttps://github.com/bubenshchykov/ngrok\nhttps://www.npmjs.com\n","enisa_id":"EUVD-2025-209888\n","aliases":"GHSA-qr28-p3wr-mxq3\nCVE-2025-57282\n","epss":0.0,"dataProcessed":"Nov 1, 2026, 2:00:21 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}},{"id":"f84c2db8-889d-347f-900d-406e55c6e3ed","vulnerability":{"id":"CVE-2025-57282","description":"ngrok v4.3.3 and 5.0.0-beta.2 is vulnerable to Command Injection.","datePublished":"May 18, 2026, 12:00:00 AM","dateUpdated":"May 18, 2026, 5:23:14 PM","status":"PUBLISHED","baseScore":8.8,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","references":"https://www.npmjs.com\nhttps://gist.github.com/Dremig/90c2a0a2f85b0921f10e0bb3192a0c23\n","enisa_id":"EUVD-2025-209888\n","assigner":"mitre","epss":0.98,"dataProcessed":"Nov 1, 2026, 1:41:09 AM","vulnerabilityProduct":[{"id":"241f1d45-c6e6-368f-ac3a-f561f33de269","product":{"name":"n/a","vendor":{"name":"n/a"}},"product_version":"n/a"}],"vulnerabilityVendor":[{"id":"a7a87814-1bd8-3620-b325-995e3c568459","vendor":{"name":"n/a"}}]}}],"enisaIdAdvisory":[]}