{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"1.1.4"}],"component":"interactive-git-checkout","cve_ids":["CVE-2025-59046"],"ecosystem":"npm","epss":0.01187,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-4wcm-7hjf-6xw5","id":"tcs_01M5KF1R49CAEZ9P5NAZ7AG9TX","modified_at":"2026-09-10T03:50:27.914270712Z","published_at":"2025-09-10T21:37:00Z","references":["https://osv.dev/vulnerability/GHSA-4wcm-7hjf-6xw5","https://github.com/ninofiliu/interactive-git-checkout/security/advisories/GHSA-4wcm-7hjf-6xw5","https://nvd.nist.gov/vuln/detail/CVE-2025-59046","https://github.com/ninofiliu/interactive-git-checkout/commit/8dd832dd302af287a61611f4f85e157cd1c6bb41","https://github.com/ninofiliu/interactive-git-checkout"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-4wcm-7hjf-6xw5","url":"https://osv.dev/vulnerability/GHSA-4wcm-7hjf-6xw5"}],"summary":"interactive-git-checkout has a Command Injection vulnerability"}