https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-17T11:00:04.534172+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2020-52844 cnvd-2020-52844 2026-10-17T11:00:04.596560+00:00 cnvd-2020-52844 https://cve.radiocsirt.org/vuln/euvd-2026-36381 EUVD-2026-36381 2026-10-17T11:00:04.596595+00:00 EUVD-2026-36381 https://cve.radiocsirt.org/vuln/fkie_cve-2020-4059 fkie_cve-2020-4059 2026-10-17T11:00:04.596610+00:00

In mversion before 2.0.0, there is a command injection vulnerability. This issue may lead to remote code execution if a client of the library calls the vulnerable method with untrusted input. This vulnerability is patched by version 2.0.0. Previous releases are deprecated in npm. As a workaround, make sure to escape git commit messages when using the commitMessage option for the update function.

 https://cve.radiocsirt.org/vuln/ghsa-qjg4-w4c6-f6c6 GHSA-qjg4-w4c6-f6c6 — Command injection in mversion 2026-10-17T11:00:04.596641+00:00

Affected: npm: mversion

### Impact This issue may lead to remote code execution if a client of the library calls the vulnerable method with untrusted input.

### Patches Patched by version 2.0.0. Previous releases are deprecated in npm.

### Workarounds Make sure to escape git commit messages when using the commitMessage option for the update function.

 https://cve.radiocsirt.org/vuln/gsd-2020-4059 gsd-2020-4059 2026-10-17T11:00:04.596668+00:00 gsd-2020-4059