pkg:Packagist/pheditor/pheditor

所有已知漏洞

• CRITICAL9.9CVE-2026-48030Pheditor: OS Command Injection in terminal handler via unsanitized 'dir' parameter
  >= 2.0.1, < 2.0.4
• CRITICAL9.8CVE-2026-55579Pheditor: Hardcoded default password 'admin' with no forced change enables full application compromise
  >= 2.0.1, < 2.0.6
• HIGH8.8CVE-2026-55578Pheditor: Incomplete command sanitization in terminal feature allows RCE via pipe operator, backtick substitution, and newline injection
  >= 2.0.1, < 2.0.6
• HIGH8.8Pheditor has an authenticated terminal command whitelist bypass
  from 0, < 2.0.5