carbone

npm1 known CVE affecting this package

Aggregated from OSV, GitHub Security Advisories, NVD, and vendor advisories. Each CVE links to its full detail page with vendor advisories, patches, fixed versions, and remediation guidance.

CVEs affecting carbonepage 1 of 1

CVE-2024-14020MEDIUMCVSS 5.0EG 5.0✓ Fixed in 3.5.6
2026-01-07
A weakness has been identified in carboneio carbone up to fbcd349077ad0e8748be73eab2a82ea92b6f8a7e. This impacts an unknown function of the file lib/input.js of the component Formatter Handler. Executing a manipulation can lead to improper…

Check whether carbone is used in your infrastructure

EchelonGraph scans your cloud and SBOMs to map every package to your actual deployments. See blast radius for carbone CVEs against the assets you own.

Start Free Scan →