@conventional-changelog/git-client

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

Medium 5.3

CVE-2025-59433

@conventional-changelog/git-client has an Argument Injection vulnerability

Conventional Changelog generates changelogs and release notes from a project's commit messages and metadata. Prior to version 2.0.0, @conventional-changelog/git-client has an argument injection vulnerability. This vulnerability manifests with the library's ge…

conventional-changelog conventional-changelog @conventional-changelog/git-client npm

Sep 22, 2025