Skip to content
OpenAdvisories

Vendor

danger

1 known vulnerabilities.

Products

danger-js 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.3
    CVE-2026-16629

    danger danger-js CLI localGetFileAtSHA.ts danger.git.diffForFile os command injection

    A vulnerability was identified in danger danger-js up to 13.0.7. Impacted is the function danger.git.diffForFile of the file source/platforms/git/localGetFileAtSHA.ts of the component CLI. Such manipulation of the argument File leads to os command injection. …

    danger danger-js danger npm