GitHub Advisoryadvisory · npm

GHSA-fj78-2vc5-f6cm Versionn Command Injection Vulnerability

CRITICAL Published 2023-02-22 Modified 2023-02-22 Official page ↗

Aliases: CVE-2023-25805
Ecosystem: npm
Packages: versionn
Severity: Critical
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses: CWE-77
Reviewed: 2023-02-22

Affected packages

• npm versionn: < 1.1.0 → fixed in 1.1.0

Description

Impact Command Injection Vulnerability. All versions <1.1.0 are affected. Patches Please upgrade to [email protected]

Related

Alias · CVE (1)

CVE-2023-25805 versionn, software for changing version information across multiple files, has a command injection vulnerability in all versions prior to… vulnerability

Weakness · CWE (1)

CWE-77 Improper Neutralization of Special Elements used in a Command weakness

References