Skip to content
OpenAdvisories
Critical · 9.8 CVE-2023-25805 EUVD-2023-0698GHSA-fj78-2vc5-f6cm

versionn Command Injection Vulnerability

Published Feb 20, 2023 · Updated Mar 10, 2025 · Assigned by GitHub_M

Description

versionn, software for changing version information across multiple files, has a command injection vulnerability in all versions prior to version 1.1.0. This issue is patched in version 1.1.0.

Affected products

VendorProductAffectedFixed
commenthol versionn < 1.1.0 —

Affected packages

EcosystemPackageAffectedFixedRecord
npm versionn < 1.1.0 1.1.0 GHSA-fj78-2vc5-f6cm

References