7.4
High
CVE-2022-25853 All versions of the package semver-tags are vulnerable to Command Injection via the getGitTagsRemote function due to…
Description
All versions of the package semver-tags are vulnerable to Command Injection via the getGitTagsRemote function due to improper input sanitization.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| semver-tags | Versions not published |