Skip to content
OpenAdvisories

Package · npm

willitmerge

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.9
    CVE-2025-66219

    willitmerge has a command Injection vulnerability

    willitmerge is a command line tool to check if pull requests are mergeable. In versions 0.2.1 and prior, there is a command Injection vulnerability in willitmerge. The vulnerability manifests in this package due to the use of insecure child process execution …

    shama willitmerge willitmerge npm