VYPR

Willitmerge

by Dontkry

CVEs (1)

  • CVE-2025-66219CriNov 29, 2025
    risk 0.64cvss 9.8epss 0.03

    willitmerge is a command line tool to check if pull requests are mergeable. In versions 0.2.1 and prior, there is a command Injection vulnerability in willitmerge. The vulnerability manifests in this package due to the use of insecure child process execution API (exec) to which…