wastemobile CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

HIGH wastemobile CVE published 2026-10-14

CVE-2026-110637

CVE-2026-110637 debrief: buildebooks before 0.2.2 has a high-severity OS command injection vulnerability in lib/kindle.js, allowing attackers to execute commands via crafted EPUB file names passed to kindlegen. Defenders should assess exposure, prioritize verification and remediation, and monitor for suspicious activity. The vulnerability is in lib/kindle.js and allows attackers to execute OS commands as [truncated]