148 matches found
CVE-2026-16735
A security vulnerability has been detected in release-it conventional-changelog up to 11.0.1. This affects the function writeChangelog of the file index.js of the component Changelog File Handler. Such manipulation of the argument infile leads to os command injection. The attack must be carried o...
CVE-2026-16735 release-it conventional-changelog Changelog File index.js writeChangelog os command injection
A security vulnerability has been detected in release-it conventional-changelog up to 11.0.1. This affects the function writeChangelog of the file index.js of the component Changelog File Handler. Such manipulation of the argument infile leads to os command injection. The attack must be carried o...
CVE-2026-16735 release-it conventional-changelog Changelog File index.js writeChangelog os command injection
A security vulnerability has been detected in release-it conventional-changelog up to 11.0.1. This affects the function writeChangelog of the file index.js of the component Changelog File Handler. Such manipulation of the argument infile leads to os command injection. The attack must be carried o...
CVE-2026-16735
The CVE concerns release-it conventional-changelog up to 11.0.1, where the writeChangelog function in index.js of the Changelog File Handler is vulnerable. Manipulation of the infile argument enables local OS command injection, with the exploit publicly disclosed. The attack is local and requires...
EUVD-2026-48283
A security vulnerability has been detected in release-it conventional-changelog up to 11.0.1. This affects the function writeChangelog of the file index.js of the component Changelog File Handler. Such manipulation of the argument infile leads to os command injection. The attack must be carried o...
CVE-2026-16735
A security vulnerability has been detected in release-it conventional-changelog up to 11.0.1. This affects the function writeChangelog of the file index.js of the component Changelog File Handler. Such manipulation of the argument infile leads to os command injection. The attack must be carried o...
CVE-2026-16735 release-it conventional-changelog Changelog File index.js writeChangelog os command injection
A security vulnerability has been detected in release-it conventional-changelog up to 11.0.1. This affects the function writeChangelog of the file index.js of the component Changelog File Handler. Such manipulation of the argument infile leads to os command injection. The attack must be carried o...
PT-2026-63996
A security vulnerability has been detected in release-it conventional-changelog up to 11.0.1. This affects the function writeChangelog of the file index.js of the component Changelog File Handler. Such manipulation of the argument infile leads to os command injection. The attack must be carried o...
EUVD-2025-177420
Malicious code in ora-release-it-ichnology-subscription npm...
EUVD-2025-178776
Malicious code in ganymede-nestjs-izar-release-it npm...
EUVD-2025-176517
Malicious code in saturnology-astroinformatics-release-it-test npm...
EUVD-2025-176708
Malicious code in release-it-nova-orbit-figures npm...
EUVD-2025-178975
Malicious code in exoplanet-titan-repository-release-it npm...
EUVD-2025-176710
Malicious code in release-it-library-start-inquirer npm...
EUVD-2025-177121
Malicious code in plutology-release-it-despina-arcturus npm...
EUVD-2025-179932
Malicious code in bunyan-release-it-carpo-request npm...
EUVD-2025-178340
Malicious code in iota-release-it-stream-xenos npm...
EUVD-2025-179873
Malicious code in carpo-release-it-oberon-halley npm...