Replicator vulnerabilities
Published CVEs affecting Replicator products: 1 record(s), with severity, exploitation and fixes.
CVE-2026-2265
Medium · 6.5
Apr 1, 2026
Replicator 1.0.5 is vulnerable to Remote Code Execution through Insecure Deserialization
An unauthenticated remote code execution (RCE) vulnerability exists in applications that use the Replicator node package manager (npm) version 1.0.5 to deserialize untrusted user input and execute the resulting object.