CVE-2026-89066 | Projen up to 0.102.x Task Synthesis .projen/tasks.json os command injection

September 11, 2026 Yanac

A vulnerability identified as critical has been detected in Projen up to 0.102.x. Affected is an unknown function of the file .projen/tasks.json of the component Task Synthesis. The manipulation leads to os command injection.

This vulnerability is uniquely identified as CVE-2026-89066. The attack is possible to be carried out remotely. No exploit exists.

You should upgrade the affected component.VulDB Recent EntriesRead More