Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 17 Oct 2026 11:00:25 +0000 cnvd-2020-52844 https://cve.radiocsirt.org/vuln/cnvd-2020-52844 cnvd-2020-52844 https://cve.radiocsirt.org/vuln/cnvd-2020-52844 EUVD-2026-36381 https://cve.radiocsirt.org/vuln/euvd-2026-36381 EUVD-2026-36381 https://cve.radiocsirt.org/vuln/euvd-2026-36381 fkie_cve-2020-4059 https://cve.radiocsirt.org/vuln/fkie_cve-2020-4059 <p>In mversion before 2.0.0, there is a command injection vulnerability. This issue may lead to remote code execution if a client of the library calls the vulnerable method with untrusted input. This vulnerability is patched by version 2.0.0. Previous releases are deprecated in npm. As a workaround, make sure to escape git commit messages when using the commitMessage option for the update function.</p> <p>In mversion before 2.0.0, there is a command injection vulnerability. This issue may lead to remote code execution if a client of the library calls the vulnerable method with untrusted input. This vulnerability is patched by version 2.0.0. Previous releases are deprecated in npm. As a workaround, make sure to escape git commit messages when using the commitMessage option for the update function.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2020-4059 GHSA-qjg4-w4c6-f6c6 — Command injection in mversion https://cve.radiocsirt.org/vuln/ghsa-qjg4-w4c6-f6c6 <p><strong>Affected:</strong> npm: mversion</p> <p>### Impact This issue may lead to remote code execution if a client of the library calls the vulnerable method with untrusted input.</p> <p>### Patches Patched by version 2.0.0. Previous releases are deprecated in npm.</p> <p>### Workarounds Make sure to escape git commit messages when using the commitMessage option for the update function.</p> <p><strong>Affected:</strong> npm: mversion</p> <p>### Impact This issue may lead to remote code execution if a client of the library calls the vulnerable method with untrusted input.</p> <p>### Patches Patched by version 2.0.0. Previous releases are deprecated in npm.</p> <p>### Workarounds Make sure to escape git commit messages when using the commitMessage option for the update function.</p> https://cve.radiocsirt.org/vuln/ghsa-qjg4-w4c6-f6c6 gsd-2020-4059 https://cve.radiocsirt.org/vuln/gsd-2020-4059 gsd-2020-4059 https://cve.radiocsirt.org/vuln/gsd-2020-4059