CVE-2022-25855

HIGH · CVSS 7.4 EPSS 0.95%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2023-02-06 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2022-25855

Severity

HIGH

CVSS

7.4

EPSS

0.95%

All versions of the package create-choo-app3 are vulnerable to Command Injection via the devInstall function due to improper user-input sanitization.