149 matches found
CVE-2026-16735
A security vulnerability has been detected in release-it conventional-changelog up to 11.0.1. This affects the function writeChangelog of the file index.js of the component Changelog File Handler. Such manipulation of the argument infile leads to os command injection. The attack must be carried o...
CVE-2026-16735 release-it conventional-changelog Changelog File index.js writeChangelog os command injection
A security vulnerability has been detected in release-it conventional-changelog up to 11.0.1. This affects the function writeChangelog of the file index.js of the component Changelog File Handler. Such manipulation of the argument infile leads to os command injection. The attack must be carried o...
CVE-2026-16735 release-it conventional-changelog Changelog File index.js writeChangelog os command injection
A security vulnerability has been detected in release-it conventional-changelog up to 11.0.1. This affects the function writeChangelog of the file index.js of the component Changelog File Handler. Such manipulation of the argument infile leads to os command injection. The attack must be carried o...
CVE-2026-16735
The CVE concerns release-it conventional-changelog up to 11.0.1, where the writeChangelog function in index.js of the Changelog File Handler is vulnerable. Manipulation of the infile argument enables local OS command injection, with the exploit publicly disclosed. The attack is local and requires...
EUVD-2026-48283
A security vulnerability has been detected in release-it conventional-changelog up to 11.0.1. This affects the function writeChangelog of the file index.js of the component Changelog File Handler. Such manipulation of the argument infile leads to os command injection. The attack must be carried o...
CVE-2026-16735
A security vulnerability has been detected in release-it conventional-changelog up to 11.0.1. This affects the function writeChangelog of the file index.js of the component Changelog File Handler. Such manipulation of the argument infile leads to os command injection. The attack must be carried o...
CVE-2026-16735 release-it conventional-changelog Changelog File index.js writeChangelog os command injection
A security vulnerability has been detected in release-it conventional-changelog up to 11.0.1. This affects the function writeChangelog of the file index.js of the component Changelog File Handler. Such manipulation of the argument infile leads to os command injection. The attack must be carried o...
CVE-2026-16735: Improper Neutralization of Special Elements used in an OS Command
A security vulnerability has been detected in release-it conventional-changelog up to 11.0.1. This affects the function writeChangelog of the file index.js of the component Changelog File Handler. Such manipulation of the argument infile leads to os command injection. The attack must be carried o...
PT-2026-63996
A security vulnerability has been detected in release-it conventional-changelog up to 11.0.1. This affects the function writeChangelog of the file index.js of the component Changelog File Handler. Such manipulation of the argument infile leads to os command injection. The attack must be carried o...
EUVD-2025-178975
Malicious code in exoplanet-titan-repository-release-it npm...
EUVD-2025-177420
Malicious code in ora-release-it-ichnology-subscription npm...
EUVD-2025-177121
Malicious code in plutology-release-it-despina-arcturus npm...
EUVD-2025-178776
Malicious code in ganymede-nestjs-izar-release-it npm...
EUVD-2025-176517
Malicious code in saturnology-astroinformatics-release-it-test npm...
EUVD-2025-176710
Malicious code in release-it-library-start-inquirer npm...
EUVD-2025-176708
Malicious code in release-it-nova-orbit-figures npm...
EUVD-2025-179873
Malicious code in carpo-release-it-oberon-halley npm...
EUVD-2025-175501
Malicious code in xenon-release-it-telesto-jabbah npm...