Critical
Low
Medium
CVE-2025-59433
Overview
Conventional Changelog generates changelogs and release notes from a project's commit messages and metadata. Prior to version 2.0.0, @conventional-changelog/git-client has an argument injection vulnerability. This vulnerability manifests with the library's getTags() API, which allows extra parameter...
Critical
Low
Medium
No items found.