{"action":"Upgrade git-commiters to 0.1.2 or later.","affected":[{"fixed":"0.1.2","introduced":"0"}],"component":"git-commiters","cve_ids":["CVE-2025-59831"],"ecosystem":"npm","epss":0.04171,"exploited":false,"fixed_versions":["0.1.2"],"ghsa_id":"GHSA-g38c-wxjf-xrh6","id":"tcs_01M5KFPVVY1KAQ5K0WBBXK1F6D","modified_at":"2025-10-16T20:41:52Z","published_at":"2025-09-22T18:01:37Z","references":["https://osv.dev/vulnerability/GHSA-g38c-wxjf-xrh6","https://github.com/snowyu/git-commiters.js/security/advisories/GHSA-g38c-wxjf-xrh6","https://nvd.nist.gov/vuln/detail/CVE-2025-59831","https://github.com/snowyu/git-commiters.js/commit/7f0abfedbf506e3a61ac875d91324a8dbe756e84","https://github.com/snowyu/git-commiters.js"],"severity":{"label":"high","score":8.8},"sources":[{"source":"osv","source_id":"GHSA-g38c-wxjf-xrh6","url":"https://osv.dev/vulnerability/GHSA-g38c-wxjf-xrh6"}],"summary":"`git-comiters` Command Injection vulnerability"}