CVE-2025-63706

Critical

Published: 07/05/2026(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

The NPM package next-npm-version version 1.0.1 is vulnerable to Command injection, which may allow an attacker to execute unauthorized commands on the system.

Risk Assessment

Exploitation of this vulnerability could lead to system compromise or access to sensitive data.

Recommendation

It is recommended to update the next-npm-version package to the latest version to mitigate this vulnerability.

Original NVD description (English source)

NPM package next-npm-version1.0.1 is vulnerable to Command injection.