Vulnerabilities (CVE)

Filtered by vendor Semver-tags Project Subscribe
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2022-25853 1 Semver-tags Project 1 Semver-tags 2024-11-21 N/A 7.4 HIGH
All versions of the package semver-tags are vulnerable to Command Injection via the getGitTagsRemote function due to improper input sanitization.