← Database

CVE-2022-25853

HIGH CVSS: 7.4 Published: 2023-02-06 Modified: 2026-06-17

Description

All versions of the package semver-tags are vulnerable to Command Injection via the getGitTagsRemote function due to improper input sanitization.

Affected Platforms

Semver-Tags Project Semver-Tags

Weakness Type

CWE-78, NVD-CWE-Other, CWE-78

References