plesk_extension_node.js_toolkit vulnerabilities

CVEs whose affected-version data names the plesk_extension_node.js_toolkit package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-68489High· 8.7

Static Code Injection in Plesk extensions "Ruby" before 1.6.6 and "Node.js Toolkit" before 2.5.0 allows remote authenticated users to execute arbitrary code as root via custom environment variables.

Static Code Injection in Plesk extensions "Ruby" before 1.6.6 and "Node.js Toolkit" before 2.5.0 allows remote authenticated users to execute arbitrary code as root via custom environment variables.

▾ TwilightWebPros · Plesk extension "Ruby"EPSS 0.40%via NVD

plesk_extension_node.js_toolkit vulnerabilities (CVEs) · VulnSea