CVE-2025-66219

willitmerge is a command line tool to check if pull requests are mergeable. In versions 0.2.1 and prior, there is a command Injection vulnerability in willitmerge. The vulnerability manifests in this package due to the use of insecure child process execution API exec to which it concatenates user...

grunt-willitmerge (>=0.2.0, <=1.0.0) potentially affected by CVE-2025-66219 via willitmerge (0.1.2)

willitmerge NPM version 0.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on willitmerge and may be impacted: - grunt-willitmerge =0.2.0, =1.0.0 Source cves: CVE-2025-66219 Source advisory: SNYK:JS-WILLITMERGE-14135971...

grunt-willitmerge (>=0.2.0, <=1.0.0) potentially affected by CVE-2025-66219 via willitmerge (0.1.2)

willitmerge NPM version 0.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on willitmerge and may be impacted: - grunt-willitmerge =0.2.0, =1.0.0 Source cves: CVE-2025-66219 Source advisory: OSV:GHSA-J9WJ-M24M-7JJ6...

CVE-2025-66219

creationtimestamp| type| source ---|---|--- 2025-11-25 21:10:12+00:00| published-proof-of-concept| https://github.com/shama/willitmerge/security/advisories/GHSA-j9wj-m24m-7jj6...