VYPR

danger-js

by Danger

CVEs (1)

  • CVE-2026-16629Jul 22, 2026
    risk 0.00cvss epss 0.01

    A vulnerability was identified in danger danger-js up to 13.0.7. Impacted is the function danger.git.diffForFile of the file source/platforms/git/localGetFileAtSHA.ts of the component CLI. Such manipulation of the argument File leads to os command injection. The attack needs to…