Skip to content
OpenAdvisories

Vendor

release-it

1 known vulnerabilities.

Products

conventional-changelog 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.3
    CVE-2026-16735

    release-it conventional-changelog Changelog File index.js writeChangelog os command injection

    A security vulnerability has been detected in release-it conventional-changelog up to 11.0.1. This affects the function writeChangelog of the file index.js of the component Changelog File Handler. Such manipulation of the argument infile leads to os command i…

    release-it conventional-changelog