Semver-tags Project

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Semver-tags Project records in CISA KEV

No Semver-tags Project vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record

TI-2022-09419 CVE-2022-25853 · GHSA-8h3g-hcwp-6hxq

HIGH 69

All versions of the package semver-tags are vulnerable to Command Injection via the getGitTagsRemote function due to improper input sanitization.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.01078 Published 2023-02-06 Will not fix CWE-78