CVE-2022-25855

The CVE-2022-25855 entry concerns the npm package create-choo-app3, with a documented Command Injection vulnerability in the devInstall function due to improper user-input sanitization. Multiple connected sources (Red Hat, GHSA, OSV, CNVD, SNYK, CVE lists) confirm the issue affects all versions a...