npm commandkit vulnerabilities

Latest npm commandkit CVEs

Newest publication first

1. CVE-2025-62378 CommandKit has incorrect command name exposure in context object for message command aliases

   Medium·CVSS 6.1

   Impact A logic flaw exists in the message command handler of CommandKit that affects how the commandName property is exposed to both middleware functions and command execution contexts when handling command aliases. When a message command is invoked using an alias, the ctx.comman...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.