Skip to content
OpenAdvisories

Package · npm

semver-tags

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High 7.4
    CVE-2022-25853

    semver-tags is vulnerable to Command Injection via the getGitTagsRemote function

    All versions of the package semver-tags are vulnerable to Command Injection via the getGitTagsRemote function due to improper input sanitization.

    semver-tags npm