VULNERABILITY INTELLIGENCE

CVE-2022-25853

CVSS score7.8 HIGH

EPSS probability1.08%

CISA KEVNot currently listed

Published2023-02-06

Last modified2026-06-17

Description

All versions of the package semver-tags are vulnerable to Command Injection via the getGitTagsRemote function due to improper input sanitization.