Ghostwire

CVE-2026-19284: A security vulnerability has been detected in MauricioMilano coder-api up to 1.1.0. Affected is the function...

MEDIUM CVSS 5.3 Exploit Available

Published: August 8, 2026 | Last Modified: August 8, 2026

Description

A security vulnerability has been detected in MauricioMilano coder-api up to 1.1.0. Affected is the function createProject of the file src/core/projects.ts of the component Projects Endpoint. The manipulation leads to command injection. The attack must be carried out locally. The project was informed of the problem early through an issue report but has not responded yet.

Ghostwire Analysis — What This Means Practically

This analysis is generated by Ghostwire from NVD, CISA KEV, EPSS, and open-source intelligence data. Verify findings through primary sources before acting.

Security Coverage (1 articles)

References