VYPR

danger-js

by Danger

Source repositories

CVEs (1)

  • CVE-2026-16629MedJul 22, 2026
    risk 0.27cvss 5.3epss 0.01

    A vulnerability was identified in danger danger-js up to 13.0.7. Impacted is the function danger.git.diffForFile of the file source/platforms/git/localGetFileAtSHA.ts of the component CLI. Such manipulation of the argument File leads to os command injection. The attack needs to…