All 2 CVE vulnerabilities found in conventional-changelog, with AI-generated Chinese analysis, references, and POCs.
Vendor: conventional-changelog
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-16735 | release-it conventional-changelog Changelog File index.js writeChangelog os command injection CWE-78 | 5.3 | Medium | 2026-07-23 |
| CVE-2025-59433 | @conventional-changelog/git-client has an Argument Injection vulnerability CWE-88 | 5.3 | Medium | 2025-09-22 |
All 2 known CVE vulnerabilities affecting conventional-changelog with full Chinese analysis, references, and POCs where available.