176 matches found
CVE-2026-16735
A security vulnerability has been detected in release-it conventional-changelog up to 11.0.1. This affects the function writeChangelog of the file index.js of the component Changelog File Handler. Such manipulation of the argument infile leads to os command injection. The attack must be carried o...
CVE-2026-16735 release-it conventional-changelog Changelog File index.js writeChangelog os command injection
A security vulnerability has been detected in release-it conventional-changelog up to 11.0.1. This affects the function writeChangelog of the file index.js of the component Changelog File Handler. Such manipulation of the argument infile leads to os command injection. The attack must be carried o...
CVE-2026-16735 release-it conventional-changelog Changelog File index.js writeChangelog os command injection
A security vulnerability has been detected in release-it conventional-changelog up to 11.0.1. This affects the function writeChangelog of the file index.js of the component Changelog File Handler. Such manipulation of the argument infile leads to os command injection. The attack must be carried o...
Malicious code in conventional-changelog-dash (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 881ccc3d6c947645ee3866499931db298b0f2f7ac4a3d41dd9acf806d4e6d702 The package conventional-changelog-dash was found to contain malicious code. Source: ossf-package-analysis...
MAL-2026-2700 Malicious code in conventional-changelog-dash (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 881ccc3d6c947645ee3866499931db298b0f2f7ac4a3d41dd9acf806d4e6d702 The package conventional-changelog-dash was found to contain malicious code. Source: ossf-package-analysis...
EUVD-2025-177158
Malicious code in pipe-cz-conventional-changelog-meissa-canopus npm...
EUVD-2025-179424
Malicious code in cz-conventional-changelog-stop-readable-mutation npm...
EUVD-2025-179011
Malicious code in europa-polaris-terraforming-cz-conventional-changelog npm...
EUVD-2025-179427
Malicious code in cz-conventional-changelog-ora-rehype-xanadu npm...
EUVD-2025-179339
Malicious code in deneb-bellatrix-eridanus-cz-conventional-changelog npm...
EUVD-2025-178046
Malicious code in local-cz-conventional-changelog-cosmos-quark npm...
EUVD-2025-179955
Malicious code in build-farout-cz-conventional-changelog-rocket npm...
EUVD-2025-179425
Malicious code in cz-conventional-changelog-sirius-cluster-tectonophysics npm...
EUVD-2025-177587
Malicious code in nightwatch-server-pino-pretty-cz-conventional-changelog npm...
EUVD-2025-179734
Malicious code in chromedriver-hyperion-isostasy-cz-conventional-changelog npm...
EUVD-2025-178548
Malicious code in hercules-css-minimizer-webpack-plugin-cz-conventional-changelog-dorado npm...
EUVD-2025-179428
Malicious code in cz-conventional-changelog-heliophysics-carpo-mocha npm...
EUVD-2025-179423
Malicious code in cz-conventional-changelog-webdriver-mocha-lepton-abiogenesis npm...