CVE-2022-25853

All versions of the package semver-tags are vulnerable to Command Injection via the getGitTagsRemote function due to improper input sanitization...

@braira/changelog (>=1.0.0, <=1.0.4), grunt-ivantage-svn-changelog (>=0.3.0, <=0.4.1) potentially affected by CVE-2022-25853 via semver-tags (>=0.1.5, <=0.4.10)

semver-tags NPM version =0.1.5, =1.0.0, =0.3.0, =0.4.1 Source cves: CVE-2022-25853 Source advisory: OSV:GHSA-8H3G-HCWP-6HXQ...

CVE-2022-25853

All versions of the package semver-tags are vulnerable to Command Injection via the getGitTagsRemote function due to improper input sanitization...

CVE-2022-25853

All versions of the package semver-tags are vulnerable to Command Injection via the getGitTagsRemote function due to improper input sanitization...

CVE-2022-25853

All versions of the package semver-tags are vulnerable to Command Injection via the getGitTagsRemote function due to improper input sanitization...

CVE-2022-25853

CVE-2022-25853 affects the npm package semver-tags. The vulnerability is a Command Injection in getGitTagsRemote caused by improper input sanitization. Exploitation details and a Proof-of-Concept exist (Snyk report shows an input payload that triggers code execution). Several trusted feeds (Verac...

@braira/changelog (>=1.0.0, <=1.0.4), grunt-ivantage-svn-changelog (>=0.3.0, <=0.4.1) potentially affected by CVE-2022-25853 via semver-tags (>=0.1.5, <=0.4.10)

semver-tags NPM version =0.1.5, =1.0.0, =0.3.0, =0.4.1 Source cves: CVE-2022-25853 Source advisory: SNYK:JS-SEMVERTAGS-3175612...