EUVD-2023-0667

🗓️ 03 Oct 2025 20:07:09Reported by EUVDType

semver-tags is vulnerable to Command Injection in getGitTagsRemote function affecting its security.

Reporter	Title	Published	Views	Family All 15
Circl	CVE-2022-25853	6 Feb 202307:22	–	circl
CNNVD	semver-tags 安全漏洞	6 Feb 202300:00	–	cnnvd
CVE	CVE-2022-25853	6 Feb 202305:00	–	cve
Cvelist	CVE-2022-25853	6 Feb 202305:00	–	cvelist
Github Security Blog	semver-tags is vulnerable to Command Injection via the getGitTagsRemote function	6 Feb 202306:30	–	github
NVD	CVE-2022-25853	6 Feb 202305:15	–	nvd
OSV	CVE-2022-25853	6 Feb 202305:15	–	osv
OSV	GHSA-8H3G-HCWP-6HXQ semver-tags is vulnerable to Command Injection via the getGitTagsRemote function	6 Feb 202306:30	–	osv
Prion	Command injection	6 Feb 202305:15	–	prion
RedhatCVE	CVE-2022-25853	7 Feb 202304:26	–	redhatcve

[
  {
    "enisaIdVendor": [
      {
        "id": "98249eec-3d7f-3c28-8e65-c90ece51930d",
        "vendor": {
          "name": "n/a"
        }
      }
    ]
  }
]

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2022-25853
github	www.github.com/jtrussell/semver-tags
github	www.github.com/jtrussell/semver-tags/blob/db1ba680bafed0d51e1bb36bd38f2c5439fe8b00/lib/get-tags.js
github	www.github.com/jtrussell/semver-tags/blob/db1ba680bafed0d51e1bb36bd38f2c5439fe8b00/lib/get-tags.js%23L21
security	www.security.snyk.io/vuln/SNYK-JS-SEMVERTAGS-3175612

03 Oct 2025 20:07Current

7.4High risk

Vulners AI Score7.4

CVSS 3.17.4 - 7.8

EPSS0.01078

SSVC