This site is an independent open-source project and is not affiliated with, endorsed by, or sponsored by npm, Inc. or GitHub, Inc. The name “npm” is a registered trademark of npm, Inc., used here solely to describe compatibility and reference publicly available npm package data.
Version Details and Security Vulnerabilities
📦
@release-it-plugins/lerna-changelog
5.0.0
Security Vulnerabilities
Security Details
Comprehensive list of direct or transitive vulnerabilities for version 5.0.0 of the package @release-it-plugins/lerna-changelog.
All Security Vulnerabilities
All the vulnerabilities related to the version 5.0.0 of the package
Summary:
Command Injection in lodash
Details:
lodash versions prior to 4.17.21 are vulnerable to Command Injection via the template function.