EUVD-2026-105039Published
launch-editor allows users to open files with line numbers in editor from Node.js. Prior to 2.14.2, launch-editor did not escape % on Windows when passing an argument to cmd. When an environment variable contained a malicious value, it was …
Exact source revision recorded 5 Nov 2026 04:01:39 UTC. It does not establish the source's current position. Latest evidence.
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2026-112943 · Microsoft / collected KEV context
euvd · EUVD-2026-105039
Current operational correlations are not mixed into this historical source record. Open latest evidence to discover current connections.