{"action":"Upgrade @conventional-changelog/git-client to 2.0.0 or later.","affected":[{"fixed":"2.0.0","introduced":"0"}],"component":"@conventional-changelog/git-client","cve_ids":["CVE-2025-59433"],"ecosystem":"npm","epss":0.00216,"exploited":false,"fixed_versions":["2.0.0"],"ghsa_id":"GHSA-vh25-5764-9wcr","id":"tcs_01M5KGBX1RGZNWK4PAG3FGMJQN","modified_at":"2025-09-22T21:59:10Z","published_at":"2025-09-22T18:01:01Z","references":["https://osv.dev/vulnerability/GHSA-vh25-5764-9wcr","https://github.com/conventional-changelog/conventional-changelog/security/advisories/GHSA-vh25-5764-9wcr","https://nvd.nist.gov/vuln/detail/CVE-2025-59433","https://github.com/conventional-changelog/conventional-changelog/commit/d95c9ffac05af58228bd89fa0ba37ad65741c6a2","https://github.com/conventional-changelog/conventional-changelog"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"GHSA-vh25-5764-9wcr","url":"https://osv.dev/vulnerability/GHSA-vh25-5764-9wcr"}],"summary":"@conventional-changelog/git-client has Argument Injection vulnerability"}