Lucene search
+L

6 matches found

NVD
NVD
•added 2026/07/23 2:17 p.m.•23 views

CVE-2026-16735

A security vulnerability has been detected in release-it conventional-changelog up to 11.0.1. This affects the function writeChangelog of the file index.js of the component Changelog File Handler. Such manipulation of the argument infile leads to os command injection. The attack must be carried o...

5.3CVSS0.01083EPSS
SaveExploits0References6
EUVD
EUVD
•added 2026/07/23 1:45 p.m.•24 views

EUVD-2026-48283

A security vulnerability has been detected in release-it conventional-changelog up to 11.0.1. This affects the function writeChangelog of the file index.js of the component Changelog File Handler. Such manipulation of the argument infile leads to os command injection. The attack must be carried o...

5.3CVSS5.3AI score0.01083EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment
•added 2026/07/23 1:45 p.m.•13 views

CVE-2026-16735 release-it conventional-changelog Changelog File index.js writeChangelog os command injection

A security vulnerability has been detected in release-it conventional-changelog up to 11.0.1. This affects the function writeChangelog of the file index.js of the component Changelog File Handler. Such manipulation of the argument infile leads to os command injection. The attack must be carried o...

5.3CVSS5.3AI score0.01083EPSS
SaveExploits0References6
CVE
CVE
•added 2026/07/23 1:45 p.m.•36 views

CVE-2026-16735

The CVE concerns release-it conventional-changelog up to 11.0.1, where the writeChangelog function in index.js of the Changelog File Handler is vulnerable. Manipulation of the infile argument enables local OS command injection, with the exploit publicly disclosed. The attack is local and requires...

5.3CVSS5.3AI score0.01083EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/23 12:00 a.m.•8 views

CVE-2026-16735: Improper Neutralization of Special Elements used in an OS Command

A security vulnerability has been detected in release-it conventional-changelog up to 11.0.1. This affects the function writeChangelog of the file index.js of the component Changelog File Handler. Such manipulation of the argument infile leads to os command injection. The attack must be carried o...

5.3CVSS5.3AI score0.01083EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/07/23 12:00 a.m.•30 views

PT-2026-63996

A security vulnerability has been detected in release-it conventional-changelog up to 11.0.1. This affects the function writeChangelog of the file index.js of the component Changelog File Handler. Such manipulation of the argument infile leads to os command injection. The attack must be carried o...

5.3CVSS5.3AI score0.01083EPSS
SaveExploits0References7
Rows per page
Query Builder