{"id":"CVE-2026-59160","summary":"Yeger: Unauthenticated Network-Exposed Turborepo Task Execution via /api/run","details":"Yeger is a monorepo for npm packages maintained under the yeger scope. Prior to 2.8.9, the turbo-graph package starts its embedded Next.js server from packages/turbo-graph/src/index.ts on all interfaces, including 0.0.0.0:29312 by default, while the GET handler for /api/run in packages/turbo-graph-ui/app/api/run/route.ts has no authentication, authorization, CSRF protection, or task allowlist. The handler accepts the tasks, filter, and force query parameters, and buildResponseFromArgs passes attacker-selected task names to spawn() as Turbo CLI arguments. An adjacent-network attacker can execute any task defined in the victim repository's turbo.json with the privileges of the developer OS user, potentially exposing secrets, modifying files or infrastructure, or causing destructive availability effects. The use of an argument array prevents traditional shell metacharacter injection but does not prevent unauthorized execution of defined tasks. This issue is fixed in version 2.8.9.","aliases":["GHSA-2r5q-h53f-9rp3"],"modified":"2026-10-02T03:30:22.548236148Z","published":"2026-09-15T16:36:13.945Z","database_specific":{"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/59xxx/CVE-2026-59160.json","cna_assigner":"GitHub_M","cwe_ids":["CWE-306"]},"references":[{"type":"WEB","url":"https://github.com/DerYeger/yeger/releases/tag/@yeger/turbo-graph@2.8.9"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/59xxx/CVE-2026-59160.json"},{"type":"ADVISORY","url":"https://github.com/DerYeger/yeger/security/advisories/GHSA-2r5q-h53f-9rp3"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-59160"},{"type":"FIX","url":"https://github.com/DerYeger/yeger/commit/a6c41db6b575cccdd8ff89dbe8ce1792ad062852"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/deryeger/yeger","events":[{"introduced":"0"},{"fixed":"a6c41db6b575cccdd8ff89dbe8ce1792ad062852"}],"database_specific":{"extracted_events":[{"introduced":"0"},{"fixed":"2.8.9"}],"source":["AFFECTED_FIELD","REFERENCES"]}}],"versions":["@yeger/turbo-graph@2.8.8","@yeger/turbo-graph-ui@2.8.8","@yeger/vue-masonry-wall@6.1.1","vite-plugin-lib@4.0.3","@yeger/turbo-graph@2.8.7","@yeger/turbo-graph-ui@2.8.7","vue-fast-mount@0.4.1","d3-graph-controller@3.1.9","vue-fast-mount@0.4.0","vue-fast-mount@0.3.1","vue-fast-mount@0.3.0","vue-fast-mount@0.2.2","vue-fast-mount@0.2.1","vue-fast-mount@0.2.0","vue-fast-mount@0.1.2","vue-fast-mount@0.1.1","vue-fast-mount@0.1.0","vue-fast-mount@0.0.7","vue-fast-mount@0.0.6","vue-fast-mount@0.0.5","vue-fast-mount@0.0.4","@yeger/streams@3.5.0","vue-fast-mount@0.0.3","vue-marmoset-viewer@5.0.0","vue-fast-mount@0.0.2","vue-fast-mount@0.0.1","@yeger/streams@3.4.0","@yeger/streams@3.3.0","@yeger/vue-masonry-wall@6.1.0","@yeger/vue2-masonry-wall@6.0.0","@yeger/vue-masonry-wall@6.0.0","@yeger/streams@3.2.0","@yeger/streams@3.1.0","@yeger/streams@3.0.0","d3-graph-controller@3.1.8","@yeger/vitest-utils@1.2.2","@yeger/vitest-utils@1.2.1","@yeger/vitest-utils@1.2.0","@yeger/turbo-graph@2.3.15","@yeger/turbo-graph-ui@2.8.6","@yeger/turbo-graph@2.3.14","@yeger/turbo-graph-ui@2.8.5","vue-persistent-storage-manager@3.0.21","vue-marmoset-viewer@4.0.23","vite-plugin-lib@4.0.2","d3-graph-controller@3.1.7","@yeger/vue2-masonry-wall@5.1.5","@yeger/vue-masonry-wall@5.1.5","@yeger/vue-masonry-wall-core@5.0.22","@yeger/turbo-graph@2.3.13","@yeger/turbo-graph-ui@2.8.4","@yeger/streams@2.0.2","@yeger/scripts@1.0.16","@yeger/eslint-config@3.1.0","@yeger/turbo-graph@2.3.12","@yeger/turbo-graph-ui@2.8.3","@yeger/turbo-graph@2.3.11","@yeger/turbo-graph-ui@2.8.2","@yeger/html-diff@1.0.0","vue-persistent-storage-manager@3.0.20","vue-marmoset-viewer@4.0.22","vite-plugin-ssg-utils@2.0.19","vite-plugin-lib@4.0.1","vecti@3.1.5","resumon@2.1.4","key-hierarchy@3.0.9","d3-graph-controller@3.1.6","@yeger/vue2-masonry-wall@5.1.4","@yeger/vue-masonry-wall@5.1.4","@yeger/vue-masonry-wall-core@5.0.21","@yeger/vue-lib-adapter@2.0.16","@yeger/vitest-utils@1.1.0","@yeger/turbo-graph@2.3.10","@yeger/streams@2.0.1","@yeger/scripts@1.0.15","@yeger/fol@1.1.4","@yeger/debounce@2.0.17","vue-persistent-storage-manager@3.0.19","vue-marmoset-viewer@4.0.21","vite-plugin-ssg-utils@2.0.18","vite-plugin-lib@4.0.0","vecti@3.1.4","resumon@2.1.3","key-hierarchy@3.0.8","d3-graph-controller@3.1.5","@yeger/vue2-masonry-wall@5.1.3","@yeger/vue-masonry-wall@5.1.3","@yeger/vue-masonry-wall-core@5.0.20","@yeger/vue-lib-adapter@2.0.15","@yeger/vitest-utils@1.0.1","@yeger/turbo-graph@2.3.9","@yeger/streams@2.0.0","@yeger/scripts@1.0.14","@yeger/fol@1.1.3","@yeger/debounce@2.0.16","vue-persistent-storage-manager@3.0.18","vue-marmoset-viewer@4.0.20","vite-plugin-ssg-utils@2.0.17","vecti@3.1.3","resumon@2.1.2","key-hierarchy@3.0.7","d3-graph-controller@3.1.4","@yeger/vue2-masonry-wall@5.1.2","@yeger/vue-masonry-wall@5.1.2","@yeger/vue-masonry-wall-core@5.0.19","@yeger/vue-lib-adapter@2.0.14","@yeger/vitest-utils@1.0.0","@yeger/turbo-graph@2.3.8","@yeger/streams@1.4.0","@yeger/scripts@1.0.13","@yeger/fol@1.1.2","@yeger/debounce@2.0.15","vite-plugin-lib@3.0.4","vite-plugin-lib@3.0.3","@yeger/turbo-graph@2.3.7","@yeger/turbo-graph-ui@2.8.1","@yeger/streams@1.3.2","@yeger/eslint-config@3.0.1","@yeger/turbo-graph@2.3.6","@yeger/turbo-graph-ui@2.8.0","@yeger/turbo-graph@2.3.5","@yeger/turbo-graph-ui@2.7.0","@yeger/turbo-graph@2.3.4","@yeger/turbo-graph-ui@2.6.2","@yeger/turbo-graph@2.3.3","@yeger/turbo-graph-ui@2.6.1","@yeger/turbo-graph@2.3.2","@yeger/turbo-graph-ui@2.6.0","@yeger/turbo-graph@2.3.1","@yeger/turbo-graph-ui@2.5.0","@yeger/eslint-config@3.0.0","@yeger/vue2-masonry-wall@5.1.0","@yeger/vue-masonry-wall@5.1.0","vue-marmoset-viewer@4.0.18","key-hierarchy@3.0.5","d3-graph-controller@3.1.2","@yeger/vue2-masonry-wall@5.0.23","@yeger/vue-masonry-wall@5.0.22","@yeger/vue-masonry-wall-core@5.0.17","@yeger/debounce@2.0.14","key-hierarchy@3.0.4","key-hierarchy@3.0.3","key-hierarchy@3.0.2","key-hierarchy@3.0.1","key-hierarchy@3.0.0","key-hierarchy@2.0.0","key-hierarchy@1.1.0","key-hierarchy@1.0.2","key-hierarchy@1.0.1","key-hierarchy@1.0.0","@yeger/eslint-config@2.7.2","@yeger/eslint-config@2.7.1","vue-persistent-storage-manager@3.0.17","vue-marmoset-viewer@4.0.17","@yeger/vue2-masonry-wall@5.0.22","@yeger/vue-masonry-wall@5.0.21","@yeger/turbo-graph@2.3.0","@yeger/turbo-graph-ui@2.4.0","vite-plugin-ssg-utils@2.0.16","vite-plugin-lib@3.0.2","@yeger/turbo-graph@2.2.0","@yeger/turbo-graph-ui@2.3.0","@yeger/turbo-graph@2.1.1","@yeger/turbo-graph-ui@2.2.1","@yeger/turbo-graph@2.1.0","@yeger/turbo-graph-ui@2.2.0","@yeger/eslint-config@2.7.0","@yeger/turbo-graph@2.0.15","@yeger/turbo-graph-ui@2.1.8","vue-persistent-storage-manager@3.0.16","vue-marmoset-viewer@4.0.16","@yeger/vue2-masonry-wall@5.0.21","@yeger/vue-masonry-wall@5.0.20","@yeger/eslint-config@2.6.2","vue-persistent-storage-manager@3.0.15","vue-marmoset-viewer@4.0.15","vite-plugin-ssg-utils@2.0.15","vite-plugin-lib@3.0.1","vecti@3.1.1","resumon@2.1.1","d3-graph-controller@3.1.1","@yeger/vue2-masonry-wall@5.0.20","@yeger/vue-masonry-wall@5.0.19","@yeger/vue-masonry-wall-core@5.0.16","@yeger/vue-lib-adapter@2.0.13","@yeger/turbo-graph@2.0.14","@yeger/turbo-graph-ui@2.1.7","@yeger/streams@1.3.1","@yeger/scripts@1.0.12","@yeger/fol@1.1.1","@yeger/eslint-config@2.6.1","@yeger/debounce@2.0.13","vite-plugin-lib@3.0.0","vite-plugin-lib@2.2.1","vite-plugin-lib@2.2.0","vecti@3.1.0","resumon@2.1.0","d3-graph-controller@3.1.0","@yeger/turbo-graph@2.0.13","@yeger/turbo-graph-ui@2.1.6","@yeger/streams@1.3.0","@yeger/fol@1.1.0","vite-plugin-lib@2.1.6","@yeger/turbo-graph@2.0.12","@yeger/turbo-graph-ui@2.1.5","@yeger/eslint-config@2.6.0","@yeger/eslint-config@2.5.6","@yeger/eslint-config@2.5.5","@yeger/eslint-config@2.5.4","vue-persistent-storage-manager@3.0.14","vue-marmoset-viewer@4.0.14","vite-plugin-ssg-utils@2.0.14","vite-plugin-lib@2.1.5","vecti@3.0.13","resumon@2.0.13","d3-graph-controller@3.0.13","@yeger/vue2-masonry-wall@5.0.19","@yeger/vue-masonry-wall@5.0.18","@yeger/vue-masonry-wall-core@5.0.15","@yeger/vue-lib-adapter@2.0.12","@yeger/turbo-graph@2.0.11","@yeger/turbo-graph-ui@2.1.4","@yeger/streams@1.2.4","@yeger/scripts@1.0.11","@yeger/fol@1.0.12","@yeger/eslint-config@2.5.3","@yeger/debounce@2.0.12","vue-persistent-storage-manager@3.0.13","vue-marmoset-viewer@4.0.13","vite-plugin-ssg-utils@2.0.13","vite-plugin-lib@2.1.4","vecti@3.0.12","resumon@2.0.12","d3-graph-controller@3.0.12","@yeger/vue2-masonry-wall@5.0.18","@yeger/vue-masonry-wall@5.0.17","@yeger/vue-masonry-wall-core@5.0.14","@yeger/vue-lib-adapter@2.0.11","@yeger/turbo-graph@2.0.10","@yeger/turbo-graph-ui@2.1.3","@yeger/streams@1.2.3","@yeger/scripts@1.0.10","@yeger/fol@1.0.11","@yeger/eslint-config@2.5.2","@yeger/debounce@2.0.11","vite-plugin-lib@2.1.3","@yeger/turbo-graph@2.0.9","@yeger/turbo-graph-ui@2.1.2","@yeger/streams@1.2.2","@yeger/eslint-config@2.5.1","@yeger/eslint-config@2.5.0","@yeger/debounce@2.0.10","@yeger/eslint-config@2.4.1","@yeger/eslint-config@2.4.0","@yeger/vue2-masonry-wall@5.0.16","@yeger/vue-masonry-wall@5.0.15","@yeger/vue-masonry-wall-core@5.0.12","@yeger/turbo-graph@2.0.7","@yeger/turbo-graph-ui@2.1.0","vite-plugin-lib@2.1.1","vue-persistent-storage-manager@3.0.11","vite-plugin-lib@2.1.0","@yeger/vue2-masonry-wall@5.0.15","@yeger/vue-masonry-wall@5.0.14","@yeger/vue-masonry-wall-core@5.0.11","@yeger/turbo-graph@2.0.6","@yeger/turbo-graph-ui@2.0.6","@yeger/streams@1.2.0","vite-plugin-lib@2.0.13","@yeger/eslint-config@2.3.0","vue-marmoset-viewer@4.0.11","vite-plugin-lib@2.0.12","@yeger/vue2-masonry-wall@5.0.14","@yeger/vue-masonry-wall@5.0.13","@yeger/eslint-config@2.2.3","@yeger/vue2-masonry-wall@5.0.13","@yeger/vue-masonry-wall@5.0.12","vue-persistent-storage-manager@3.0.10","vue-marmoset-viewer@4.0.10","vite-plugin-ssg-utils@2.0.11","vite-plugin-lib@2.0.11","vecti@3.0.10","resumon@2.0.10","d3-graph-controller@3.0.10","@yeger/vue2-masonry-wall@5.0.12","@yeger/vue-masonry-wall@5.0.11","@yeger/vue-masonry-wall-core@5.0.10","@yeger/vue-lib-adapter@2.0.9","@yeger/turbo-graph@2.0.5","@yeger/turbo-graph-ui@2.0.5","@yeger/streams@1.1.9","@yeger/scripts@1.0.8","@yeger/fol@1.0.9","@yeger/eslint-config@2.2.2","@yeger/debounce@2.0.9","vite-plugin-ssg-utils@2.0.10","vite-plugin-lib@2.0.10","vecti@3.0.9","resumon@2.0.9","d3-graph-controller@3.0.9","@yeger/vue2-masonry-wall@5.0.11","@yeger/turbo-graph@2.0.4","@yeger/turbo-graph-ui@2.0.4","@yeger/fol@1.0.8","@yeger/eslint-config@2.2.1","@yeger/turbo-graph@2.0.3","@yeger/turbo-graph-ui@2.0.3","@yeger/streams@1.1.8","@yeger/eslint-config@2.2.0","@yeger/vue2-masonry-wall@5.0.10","@yeger/vue-masonry-wall@5.0.10","@yeger/vue-masonry-wall-core@5.0.9","@yeger/debounce@2.0.8","vue-persistent-storage-manager@3.0.8","vue-marmoset-viewer@4.0.8","vite-plugin-ssg-utils@2.0.8","vite-plugin-lib@2.0.8","vecti@3.0.7","resumon@2.0.7","d3-graph-controller@3.0.7","@yeger/vue2-masonry-wall@5.0.8","@yeger/vue-masonry-wall@5.0.8","@yeger/vue-masonry-wall-core@5.0.7","@yeger/vue-lib-adapter@2.0.7","@yeger/turbo-graph@2.0.1","@yeger/turbo-graph-ui@2.0.1","@yeger/streams@1.1.6","@yeger/scripts@1.0.6","@yeger/fol@1.0.6","@yeger/eslint-config@2.1.2","@yeger/debounce@2.0.7","@yeger/eslint-config@2.1.1","@yeger/eslint-config@2.1.0","vue-persistent-storage-manager@3.0.7","vue-marmoset-viewer@4.0.7","vite-plugin-ssg-utils@2.0.7","vite-plugin-lib@2.0.7","vecti@3.0.6","resumon@2.0.6","d3-graph-controller@3.0.6","@yeger/vue2-masonry-wall@5.0.7","@yeger/vue-masonry-wall@5.0.7","@yeger/vue-masonry-wall-core@5.0.6","@yeger/vue-lib-adapter@2.0.6","@yeger/turbo-graph@2.0.0","@yeger/turbo-graph-ui@2.0.0","@yeger/streams@1.1.5","@yeger/scripts@1.0.5","@yeger/fol@1.0.5","@yeger/eslint-config@2.0.0","@yeger/debounce@2.0.6","@yeger/eslint-config@1.9.6","vue-persistent-storage-manager@3.0.6","vue-marmoset-viewer@4.0.6","vite-plugin-ssg-utils@2.0.6","vite-plugin-lib@2.0.6","vecti@3.0.5","resumon@2.0.5","d3-graph-controller@3.0.5","@yeger/vue2-masonry-wall@5.0.6","@yeger/vue-masonry-wall@5.0.6","@yeger/vue-masonry-wall-core@5.0.5","@yeger/vue-lib-adapter@2.0.5","@yeger/turbo-graph@1.0.7","@yeger/turbo-graph-ui@1.0.7","@yeger/streams@1.1.4","@yeger/scripts@1.0.4","@yeger/fol@1.0.4","@yeger/eslint-config@1.9.5","@yeger/debounce@2.0.5","vue-persistent-storage-manager@3.0.5","vue-marmoset-viewer@4.0.5","vite-plugin-ssg-utils@2.0.5","vite-plugin-lib@2.0.5","vecti@3.0.4","resumon@2.0.4","d3-graph-controller@3.0.4","@yeger/vue2-masonry-wall@5.0.5","@yeger/vue-masonry-wall@5.0.5","@yeger/vue-masonry-wall-core@5.0.4","@yeger/vue-lib-adapter@2.0.4","@yeger/turbo-graph@1.0.6","@yeger/turbo-graph-ui@1.0.6","@yeger/streams@1.1.3","@yeger/scripts@1.0.3","@yeger/fol@1.0.3","@yeger/eslint-config@1.9.4","@yeger/debounce@2.0.4","vue-persistent-storage-manager@3.0.4","vue-marmoset-viewer@4.0.4","vite-plugin-ssg-utils@2.0.4","vite-plugin-lib@2.0.4","vecti@3.0.3","resumon@2.0.3","d3-graph-controller@3.0.3","@yeger/vue2-masonry-wall@5.0.4","@yeger/vue-masonry-wall@5.0.4","@yeger/vue-masonry-wall-core@5.0.3","@yeger/vue-lib-adapter@2.0.3","@yeger/turbo-graph@1.0.5","@yeger/turbo-graph-ui@1.0.5","@yeger/streams@1.1.2","@yeger/scripts@1.0.2","@yeger/fol@1.0.2","@yeger/eslint-config@1.9.3","@yeger/debounce@2.0.3","vue-persistent-storage-manager@3.0.3","vue-marmoset-viewer@4.0.3","vite-plugin-ssg-utils@2.0.3","vite-plugin-lib@2.0.3","vecti@3.0.2","resumon@2.0.2","d3-graph-controller@3.0.2","@yeger/vue2-masonry-wall@5.0.3","@yeger/vue-masonry-wall@5.0.3","@yeger/vue-masonry-wall-core@5.0.2","@yeger/vue-lib-adapter@2.0.2","@yeger/turbo-graph@1.0.4","@yeger/turbo-graph-ui@1.0.4","@yeger/streams@1.1.1","@yeger/scripts@1.0.1","@yeger/fol@1.0.1","@yeger/eslint-config@1.9.2","@yeger/debounce@2.0.2","@yeger/turbo-graph@1.0.3","@yeger/turbo-graph-ui@1.0.3","@yeger/streams@1.1.0","vue-persistent-storage-manager@3.0.2","vue-marmoset-viewer@4.0.2","vite-plugin-ssg-utils@2.0.2","vite-plugin-lib@2.0.2","@yeger/vue2-masonry-wall@5.0.2","@yeger/vue-masonry-wall@5.0.2","vue-persistent-storage-manager@3.0.1","vue-marmoset-viewer@4.0.1","vite-plugin-ssg-utils@2.0.1","vite-plugin-lib@2.0.1","vecti@3.0.1","resumon@2.0.1","d3-graph-controller@3.0.1","@yeger/vue2-masonry-wall@5.0.1","@yeger/vue-masonry-wall@5.0.1","@yeger/vue-masonry-wall-core@5.0.1","@yeger/vue-lib-adapter@2.0.1","@yeger/turbo-graph@1.0.2","@yeger/turbo-graph-ui@1.0.2","@yeger/streams@1.0.1","@yeger/scripts@1.0.0","@yeger/debounce@2.0.1","vue-persistent-storage-manager@3.0.0","vue-marmoset-viewer@4.0.0","vite-plugin-ssg-utils@2.0.0","vite-plugin-lib@2.0.0","vecti@3.0.0","resumon@2.0.0","d3-graph-controller@3.0.0","@yeger/vue2-masonry-wall@5.0.0","@yeger/vue-masonry-wall@5.0.0","@yeger/vue-masonry-wall-core@5.0.0","@yeger/vue-lib-adapter@2.0.0","@yeger/turbo-graph@1.0.1","@yeger/turbo-graph-ui@1.0.1","@yeger/streams@1.0.0","@yeger/fol@1.0.0","@yeger/debounce@2.0.0","vue-marmoset-viewer@3.2.2","d3-graph-controller@2.6.2","@yeger/turbo-graph@1.0.0","@yeger/turbo-graph-ui@1.0.0","@yeger/streams@0.1.0","@yeger/debounce@1.2.0","@yeger/vue2-masonry-wall@4.2.2","vue-persistent-storage-manager@2.2.1","vue-marmoset-viewer@3.2.1","vite-plugin-ssg-utils@1.2.1","vite-plugin-lib@1.5.0","vecti@2.2.1","resumon@1.2.1","d3-graph-controller@2.6.1","@yeger/vue2-masonry-wall@4.2.1","@yeger/vue-masonry-wall@4.2.1","@yeger/vue-masonry-wall-core@4.2.1","@yeger/vue-lib-adapter@1.1.1","@yeger/turbo-graph@0.4.9","@yeger/turbo-graph-ui@0.5.1","@yeger/fol@0.3.1","@yeger/debounce@1.1.1","vite-plugin-lib@1.4.0","vue-persistent-storage-manager@2.2.0","vue-marmoset-viewer@3.2.0","vite-plugin-ssg-utils@1.2.0","vite-plugin-lib@1.3.0","vecti@2.2.0","resumon@1.2.0","d3-graph-controller@2.6.0","@yeger/vue2-masonry-wall@4.2.0","@yeger/vue-masonry-wall@4.2.0","@yeger/vue-masonry-wall-core@4.2.0","@yeger/vue-lib-adapter@1.1.0","@yeger/turbo-graph@0.4.8","@yeger/turbo-graph-ui@0.5.0","@yeger/fol@0.3.0","@yeger/debounce@1.1.0","@yeger/vue2-masonry-wall@4.1.0","@yeger/vue-masonry-wall@4.1.0","@yeger/vue-masonry-wall-core@4.1.0","vite-plugin-lib@1.2.3","@yeger/vue2-masonry-wall@4.0.4","@yeger/vue-masonry-wall@4.0.4","@yeger/vue2-masonry-wall@4.0.3","@yeger/vue-masonry-wall@4.0.3","@yeger/vue-masonry-wall-core@4.0.3","@yeger/vue-lib-adapter@1.0.1","@yeger/vue2-masonry-wall@4.0.2","@yeger/vue-masonry-wall@4.0.2","@yeger/vue-masonry-wall-core@4.0.2","@yeger/vue-lib-adapter@1.0.0","@yeger/vue2-masonry-wall@4.0.0","@yeger/vue-masonry-wall@4.0.0","@yeger/vue-masonry-wall@3.7.0","@yeger/vue-masonry-wall@3.6.1","@yeger/vue-masonry-wall@3.6.0","@yeger/turbo-graph@0.4.7","@yeger/turbo-graph-ui@0.4.7","@yeger/vue-masonry-wall@3.5.0","vite-plugin-lib@1.2.2","vue-persistent-storage-manager@2.1.2","vue-marmoset-viewer@3.1.2","vite-plugin-ssg-utils@1.1.1","vite-plugin-lib@1.2.1","vecti@2.1.40","resumon@1.1.1","d3-graph-controller@2.5.2","@yeger/vue2-masonry-wall@2.3.3","@yeger/vue-masonry-wall@3.4.4","@yeger/turbo-graph@0.4.6","@yeger/turbo-graph-ui@0.4.6","@yeger/fol@0.2.2","@yeger/eslint-config@1.9.1","@yeger/debounce@1.0.66","@yeger/eslint-config@1.9.0","vite-plugin-lib@1.2.0","vue-marmoset-viewer@3.1.1","vite-plugin-lib@1.1.1","d3-graph-controller@2.5.1","@yeger/vue2-masonry-wall@2.3.2","@yeger/vue-masonry-wall@3.4.3","@yeger/turbo-graph@0.4.5","@yeger/turbo-graph-ui@0.4.5","@yeger/fol@0.2.1","vite-plugin-lib@1.1.0","vue-persistent-storage-manager@2.1.1","vue-persistent-storage-manager@2.1.0","vite-plugin-lib@1.0.0","d3-graph-controller@2.5.0","@yeger/turbo-graph@0.4.4","@yeger/turbo-graph-ui@0.4.4","@yeger/fol@0.2.0","@yeger/eslint-config@1.8.1","@yeger/eslint-config@1.8.0","@yeger/eslint-config@1.7.2","@yeger/fol@0.1.0","@yeger/eslint-config@1.7.1","vue-marmoset-viewer@3.1.0","@yeger/eslint-config@1.7.0","vite-plugin-ssg-utils@1.1.0","resumon@1.1.0","@yeger/eslint-config@1.6.0","@yeger/turbo-graph@0.4.3","@yeger/turbo-graph-ui@0.4.3","@yeger/turbo-graph@0.4.2","@yeger/turbo-graph-ui@0.4.2","@yeger/turbo-graph@0.4.1","@yeger/turbo-graph-ui@0.4.1","@yeger/turbo-graph@0.4.0","@yeger/turbo-graph-ui@0.4.0","d3-graph-controller@2.4.0","@yeger/turbo-graph@0.3.0","@yeger/turbo-graph@0.2.2","@yeger/turbo-graph@0.2.1","@yeger/turbo-graph@0.2.0","d3-graph-controller@2.3.29","vecti@2.1.39","@yeger/vue2-masonry-wall@2.3.1","@yeger/eslint-config@1.5.0","@yeger/debounce@1.0.65","@yeger/vue2-masonry-wall@2.3.0","@yeger/vue2-masonry-wall@2.2.1","@yeger/vue-masonry-wall@3.4.2","@yeger/vue2-masonry-wall@2.2.0","@yeger/vue2-masonry-wall@2.1.1","@yeger/vue-masonry-wall@3.4.1","@yeger/vue2-masonry-wall@2.1.0","@yeger/vue-masonry-wall@3.4.0","v3.3.2","v3.3.1","v3.3.0","v3.2.27","v3.2.26","v3.2.25","v3.2.24","v3.2.23","v3.2.22","v3.2.21","v3.2.20","v3.2.19","v3.2.18","v3.2.17","v3.2.16","v3.2.15","v3.2.14","v3.2.13","v3.2.12","v3.2.11","v3.2.10","v3.2.9","v3.2.8","v3.2.7","v3.2.6","v3.2.5","v3.2.4","v3.2.3","v3.2.2","v3.2.1","v3.2.0","v3.1.4","v3.1.3","v3.1.2","v3.1.1","v3.1.0","v3.0.51","v3.0.50","v3.0.49","v3.0.48","v3.0.47","v3.0.46","v3.0.45","v3.0.44","v3.0.43","v3.0.42","v3.0.41","v3.0.40","v3.0.39","v3.0.38","v3.0.37","v3.0.36","v3.0.35","v3.0.34","v3.0.33","v3.0.32","v3.0.31","v3.0.30","v3.0.29","v3.0.28","v3.0.27","v3.0.26","v3.0.25","v3.0.24","v3.0.23","v3.0.22","v3.0.21","v3.0.20","v3.0.19","v3.0.18","v3.0.17","v3.0.16","v3.0.15","v3.0.14","v3.0.13","v3.0.12","v3.0.11","v3.0.10","v3.0.9","v3.0.8","v3.0.7","v3.0.6","v3.0.5","v3.0.4","v3.0.3","v3.0.2","v3.0.1","v3.0.0","v2.2.9","v2.2.8","v2.2.7","v2.2.6","v2.2.5","v2.2.4","v2.2.3","v2.2.2","v2.2.1","v2.2.0","v2.1.0","v2.0.1","v2.0.0","v1.0.3","v1.0.2","v1.0.1","v1.0.0"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-59160.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"}]}