Versionn Command Injection Vulnerability

CRITICO 9.8CVE-2023-25805 · GHSA-fj78-2vc5-f6cm · Published 20/02/2023 · updated 17/06/2026

In breve

CVE-2023-25805 è una vulnerabilità CRITICO (CVSS 9.8) che riguarda versionn (versionn project), versionn.
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 1.6%, superiore al 75.7% delle vulnerabilità.
Correzione: aggiornare a 1.1.0 o successiva.

Package	Affected versions	Patched versions
versionn versionn_project	`< 1.1.0`	`1.1.0`
versionn npm	`< 1.1.0`	`1.1.0`

Description

Impact

Command Injection Vulnerability. All versions <1.1.0 are affected.

Patches

Please upgrade to [email protected]

NVD description

versionn, software for changing version information across multiple files, has a command injection vulnerability in all versions prior to version 1.1.0. This issue is patched in version 1.1.0.

References

commenthol/versionn security advisory · WEB
nvd.nist.gov/vuln/detail/CVE-2023-25805 · ADVISORY
commenthol/versionn commit 2ca1288 · WEB
commenthol/versionn · PACKAGE

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free