{"vulnerability": "cve-2026-107703", "sightings": [{"uuid": "5305b774-d5ed-40f8-ba60-a756527be714", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-107703", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mxf76zwoaq24", "content": "\ud83d\udd34 CVE-2026-107703 - Critical (9.8)\n\n@enmaso/node-convert through 1.0.0 contains an OS command injection vulnerability in convert.js t...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-107703/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-10-08T19:32:16.421640Z"}, {"uuid": "adccf85b-827f-4c01-93e3-82c6c9d4eca6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-107703", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxfaqsesqp24", "content": "CVE-2026-107703 - @enmaso/node-convert\nThe @enmaso/node-convert library (versions up to 1.0.0) runs ImageMagick commands without cleaning the file path and conversion options. An attacker who can control those inputs\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#enmaso #CVE #infosec", "creation_timestamp": "2026-10-08T20:00:05.824888Z"}, {"uuid": "1af3ab6c-28ca-4014-a2c1-8bfd8649a5ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-107703", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mxfb76zn7d2l", "content": "\ud83d\udea8 CVE-2026-107703 \u2014 CVSS 9.3 CRITICAL\n\n@enmaso/node-convert through 1.0.0 contains an OS command injection vulnerability in convert.js that allows...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-107703\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-10-08T20:08:08.574573Z"}]}