CVE-2023-25805: 
JavaScript vulnerability analysis and mitigation

A command injection vulnerability was identified in versionn, a software tool designed for changing version information across multiple files. The vulnerability affects all versions prior to 1.1.0 and was disclosed on February 19, 2023. The issue was assigned CVE-2023-25805 and was classified as Critical (GitHub Advisory).

The vulnerability is classified as CWE-77 (Command Injection) and allows potential command injection through version string manipulation. The issue was present in the GitFn functionality where version strings were not properly validated before being used in command execution (GitHub Commit).

Given the Critical severity rating, successful exploitation of this vulnerability could allow attackers to execute arbitrary commands through maliciously crafted version strings, potentially leading to system compromise (GitHub Advisory).

The vulnerability has been patched in version 1.1.0. Users are strongly advised to upgrade to this version. The fix includes implementation of proper version string validation using semver to prevent command injection attacks (GitHub Advisory).