npm/standard-version: medium

Command Injection in standard-version

Action: Upgrade standard-version to 8.0.1 or later.

npm i standard-version@8.0.1

Affected

Fixed versions

Sources

• osv: GHSA-7xcx-6wjh-7xp2
• https://github.com/conventional-changelog/standard-version/security/advisories/GHSA-7xcx-6wjh-7xp2
• https://github.com/conventional-changelog/standard-version
• https://github.com/conventional-changelog/standard-version/tree/2f04ac8fc1c134a1981c23a093d4eece77d0bbb9

published 2020-07-13T21:34:59Z · modified 2021-09-22T21:03:04Z · JSON