npm/interactive-git-checkout CVE-2025-59046: critical 9.8, EPSS 1.19%

interactive-git-checkout has a Command Injection vulnerability

Action: No fix published. Pin and monitor.

Affected

Fixed versions

No fixed version in the source.

Sources

• osv: GHSA-4wcm-7hjf-6xw5
• https://github.com/ninofiliu/interactive-git-checkout/security/advisories/GHSA-4wcm-7hjf-6xw5
• https://nvd.nist.gov/vuln/detail/CVE-2025-59046
• https://github.com/ninofiliu/interactive-git-checkout/commit/8dd832dd302af287a61611f4f85e157cd1c6bb41
• https://github.com/ninofiliu/interactive-git-checkout

CVE-2025-59046 · published 2025-09-10T21:37:00Z · modified 2026-09-10T03:50:27.914270712Z · JSON