CVE-2025-62378
1 advisory.
npm/commandkit CVE-2025-62378: medium 6.1
CommandKit has incorrect command name exposure in context object for message command aliases
Action: Upgrade commandkit to 1.2.0-rc.12 or later.
npm i commandkit@1.2.0-rc.12Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.2.0-rc.1 | 1.2.0-rc.12 | - |
Fixed versions
| 1.2.0-rc.12 |
Sources
- osv: GHSA-fhwm-pc6r-4h2f
- https://github.com/underctrl-io/commandkit/security/advisories/GHSA-fhwm-pc6r-4h2f
- https://nvd.nist.gov/vuln/detail/CVE-2025-62378
- https://github.com/underctrl-io/commandkit/commit/440385a3e5de3fa3d2a76d23a807995cb29602fd
- https://github.com/underctrl-io/commandkit
CVE-2025-62378 · published · modified · JSON