{"id":"EUVD-2025-209724","enisaUuid":"d92cfaaa-6819-378f-a6ef-5d6146b9de79","description":"NPM package next-npm-version1.0.1 is vulnerable to Command injection.","datePublished":"May 7, 2026, 12:00:00 AM","dateUpdated":"May 8, 2026, 10:08:39 PM","baseScore":9.8,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","references":"https://github.com/afeiship/next-npm-version/issues/1\nhttps://www.npmjs.com/package/@jswork/next-npm-version\nhttps://gist.github.com/6en6ar/607368f1fc8fe429f03c6e0d9486ba72\n","aliases":"CVE-2025-63706\n","assigner":"mitre","epss":1.52,"enisaIdProduct":[{"id":"9f2f309a-917a-3665-aeba-74f24a443c57","product":{"name":"n/a","vendor":{"name":"n/a"}},"product_version":"n/a"}],"enisaIdVendor":[{"id":"1104cdab-a0c8-3bff-ba1d-9b04212c4d71","vendor":{"name":"n/a"}}],"enisaIdVulnerability":[{"id":"2e2a09ca-7ad1-390b-b0e0-f6aead84ef97","vulnerability":{"id":"CVE-2025-63706","description":"NPM package next-npm-version1.0.1 is vulnerable to Command injection.","datePublished":"May 7, 2026, 12:00:00 AM","dateUpdated":"May 8, 2026, 10:08:39 PM","status":"PUBLISHED","baseScore":9.8,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","references":"https://github.com/afeiship/next-npm-version/issues/1\nhttps://www.npmjs.com/package/@jswork/next-npm-version\nhttps://gist.github.com/6en6ar/607368f1fc8fe429f03c6e0d9486ba72\n","enisa_id":"EUVD-2025-209724\n","assigner":"mitre","epss":1.52,"dataProcessed":"Oct 29, 2026, 7:17:07 AM","vulnerabilityProduct":[{"id":"18848d36-eecb-3de0-b6a2-5c19117c811f","product":{"name":"n/a","vendor":{"name":"n/a"}},"product_version":"n/a"}],"vulnerabilityVendor":[{"id":"963ad503-e5f8-380c-9d92-6c1ae3b7e7ae","vendor":{"name":"n/a"}}]}},{"id":"f6c3e0d7-023e-3279-a0d3-f62f4a88210f","vulnerability":{"id":"GHSA-2xx6-qf7x-grqh","description":"next-npm-version is vulnerable to Command injection","datePublished":"May 7, 2026, 3:38:41 PM","dateUpdated":"May 12, 2026, 4:19:02 PM","baseScore":0.0,"references":"https://nvd.nist.gov/vuln/detail/CVE-2025-63706\nhttps://github.com/afeiship/next-npm-version/issues/1\nhttps://gist.github.com/6en6ar/607368f1fc8fe429f03c6e0d9486ba72\nhttps://github.com/afeiship/next-npm-version\nhttps://www.npmjs.com/package/@jswork/next-npm-version\n","enisa_id":"EUVD-2025-209724\n","aliases":"GHSA-2xx6-qf7x-grqh\nCVE-2025-63706\n","epss":0.0,"dataProcessed":"Oct 25, 2026, 1:55:50 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}}],"enisaIdAdvisory":[]}