CVE-2026-32304 | locutusjs locutus up to 3.0.13 eval args/code code injection

SecurityVulns
Yanac

A vulnerability classified as critical was found in locutusjs locutus up to 3.0.13. This affects the function eval. Such manipulation of the argument args/code leads to code injection.

This vulnerability is listed as CVE-2026-32304. The attack may be performed from remote. There is no available exploit.

Upgrading the affected component is advised.VulDB Recent EntriesRead More