What’s Vulnerable › Products

cookpete auto-changelog vulnerabilities

1 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 1 published in the last 12 months.

Check whether your cookpete auto-changelog version is affected

Latest cookpete auto-changelog vulnerabilities

• CVE-2026-12171 — auto-changelog: code execution via untrusted in-repository configuration (handlebarsSetup/plugins), plus argument injection, path traversal, and SSRF (CVSS 7.8)