Description
NPM package next-npm-version1.0.1 is vulnerable to Command injection.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| npm | @jswork/next-npm-version | 1.0.1 | — | GHSA-2xx6-qf7x-grqh |
Critical · 9.8
CVE-2025-63706
EUVD-2025-209724GHSA-2xx6-qf7x-grqh
next-npm-version is vulnerable to Command injection
Published May 7, 2026 · Updated May 8, 2026 · Assigned by mitre