CVE-2026-48547

The flaw

KanaDojo contains a command injection vulnerability that allows an attacker with pull request access to execute arbitrary shell commands by inserting shell metacharacters into the version or changes fields of patchNotesData.json, which are

What to do

Review advisory and patch per vendor guidance.

References