CVE-2025-63706

NPM package next-npm-version1.0.1 is vulnerable to Command injection...

GHSA-2XX6-QF7X-GRQH next-npm-version is vulnerable to Command injection

NPM package next-npm-version1.0.1 is vulnerable to Command injection...

next-npm-version is vulnerable to Command injection

NPM package next-npm-version1.0.1 is vulnerable to Command injection...

Arbitrary Code Injection

Overview @jswork/next-npm-version is a Get npm package version. Affected versions of this package are vulnerable to Arbitrary Code Injection via the process that handles user-supplied input. An attacker can execute arbitrary system commands by supplying crafted input that is improperly sanitized...

CVE-2025-63706

NPM package next-npm-version1.0.1 is vulnerable to Command injection...

PT-2026-38439

Name of the Vulnerable Software and Affected Versions next-npm-version version 1.0.1 Description NPM package next-npm-version is subject to command injection, a flaw that allows an attacker to execute arbitrary operating system commands on the server. Recommendations At the moment, there is no...

CVE-2025-63706: Improper Control of Generation of Code

NPM package next-npm-version1.0.1 is vulnerable to Command injection...

next-npm-version 1.0.1 安全漏洞

next-npm-version is a tool developed by Aric, a personal developer, for retrieving npm package versions. The version 1.0.1 of next-npm-version contains a security vulnerability, which stems from command injection...