Skip to content

Ant-design/CLI

v6.4.4 Security

This release includes 2 security fixes for security teams reviewing exposed deployments.

Published 1mo CLI & Terminal
✓ No known CVEs patched
Read the diff → Tool health → What is this tool? →
This release patches 2 known CVEs

Topics

ant-design antd cli

Affected surfaces

rce_ssrf deps

ReleasePort's take

Moderate signal
editorial:auto 1mo

Upgrade the qs dependency to version 6.15.2 immediately to address CVE‑2026‑8723.

Why it matters: CVE‑2026‑8723 has a severity score of 90; upgrading qs resolves this critical vulnerability affecting all deployments using the affected surface.

Summary

AI summary

Broad release touches Bug Fixes, Bug 修复, Other Changes, and 其他变更.

Changes in this release

Security Critical

Upgrade qs to 6.15.2 to resolve CVE-2026-8723.

Upgrade qs to 6.15.2 to resolve CVE-2026-8723.

Source: llm_adapter@2026-06-12

Confidence: high

 —
Security High

Fix potential shell injection in build scripts.

Fix potential shell injection in build scripts.

Source: llm_adapter@2026-06-12

Confidence: high

 —
Feature Medium

Add `antd design.md` command to output antd design language specification.

Add `antd design.md` command to output antd design language specification.

Source: llm_adapter@2026-06-12

Confidence: high

 —
Feature Medium

Add `antd upgrade` command to update CLI to latest version in‑terminal.

Add `antd upgrade` command to update CLI to latest version in‑terminal.

Source: llm_adapter@2026-06-12

Confidence: high

 —
Feature Medium

All commands now support `--format markdown` and `--lang zh` for Chinese labels.

All commands now support `--format markdown` and `--lang zh` for Chinese labels.

Source: llm_adapter@2026-06-12

Confidence: high

 —
Feature Medium

`antd info` now shows note about common props (`className`, `style`, `rootClassName`).

`antd info` now shows note about common props (`className`, `style`, `rootClassName`).

Source: llm_adapter@2026-06-12

Confidence: high

 —
Bugfix Medium

Fix version auto‑detection defaulting to v5 instead of latest v6 when antd not installed.

Fix version auto‑detection defaulting to v5 instead of latest v6 when antd not installed.

Source: llm_adapter@2026-06-12

Confidence: high

 —
Bugfix Medium

Fix markdown table output with special characters being incorrectly escaped.

Fix markdown table output with special characters being incorrectly escaped.

Source: llm_adapter@2026-06-12

Confidence: high

 —
Bugfix Medium

`antd mcp` now shows helpful message instead of silently hanging.

`antd mcp` now shows helpful message instead of silently hanging.

Source: llm_adapter@2026-06-12

Confidence: low

 —
Bugfix Medium

Fix missing or malformed prop metadata and token data for components across v5/v6.

Fix missing or malformed prop metadata and token data for components across v5/v6.

Source: llm_adapter@2026-06-12

Confidence: low

 —
Full changelog

Features

  • New antd design.md command — outputs antd's design language specification (colors, typography, spacing, radius, and design principles) in design.md format, ready for AI design tools like Figma Make and Stitch. Also available as antd_design_md MCP tool (#147, ant-design#57701)
  • New antd upgrade command — update the CLI to the latest version without leaving your terminal (#123)
  • All commands now support --format markdown output and --lang zh for Chinese labels (#146)
  • antd info now shows a note about common props (className / style / rootClassName) shared by all components (#139)

Bug Fixes

  • Fix version auto-detection defaulting to v5 instead of v6 when antd is not installed locally (#150)
  • antd mcp now shows a helpful message when run directly in a terminal instead of silently hanging (#154)
  • Fix some components (e.g. those with only sub-component props) failing to display in antd info (#152)
  • Fix missing or malformed prop metadata and token data for some components across v5/v6 (#138, #132, #122, #125)
  • Fix markdown table output with special characters being incorrectly escaped (#136)
  • Fix invalid --format or --lang values being silently ignored instead of showing an error (#141)
  • Fix version parsing, antd upgrade comparison, and antd semantic --lang zh crash (#127)

Security

  • Fix potential shell injection in build scripts (#137, #134)
  • Upgrade qs to 6.15.2 to resolve CVE-2026-8723 (#121)

Other Changes

  • Reduce npm package size by excluding skills node_modules (#144)
  • Add Codex and OpenAI Agents support (#151)
  • Improve sync workflow reliability (#155, #156, #135, #133)
  • Bump dependencies (#149, #148, #130, #119, #117)
  • Update antd metadata to v6.4.4 (diff)

新功能

  • 新增 antd design.md 命令，输出 antd 设计语言规范（颜色、字体、间距、圆角及设计原则），兼容 design.md 格式，可被 Figma Make、Stitch 等 AI 设计工具直接使用，同时提供 antd_design_md MCP tool (#147, ant-design#57701)
  • 新增 antd upgrade 命令，在终端内一键升级 CLI 到最新版本 (#123)
  • 所有命令新增 --format markdown 输出格式和 --lang zh 中文显示支持 (#146)
  • antd info 输出中新增所有组件通用属性（className / style / rootClassName）的说明 (#139)

Bug 修复

  • 修复未安装 antd 时版本自动检测错误回退到 v5 而非最新 v6 的问题 (#150)
  • antd mcp 在终端中直接运行时现在会显示友好提示，不再静默挂起 (#154)
  • 修复部分组件（仅有子组件属性的组件）在 antd info 中无法正常显示的问题 (#152)
  • 修复 v5/v6 中部分组件的属性元数据和 Token 数据缺失或格式错误的问题 (#138, #132, #122, #125)
  • 修复 Markdown 表格输出中特殊字符转义不正确的问题 (#136)
  • 修复传入无效的 --format 或 --lang 值时被静默忽略而未报错的问题 (#141)
  • 修复版本解析、antd upgrade 版本比较和 antd semantic --lang zh 崩溃等问题 (#127)

安全

  • 修复构建脚本中潜在的命令注入风险 (#137, #134)
  • 升级 qs 至 6.15.2，修复 CVE-2026-8723 安全漏洞 (#121)

其他变更

  • 排除 skills 的 node_modules，减小包体积 (#144)
  • 新增 Codex 及 OpenAI Agents 支持 (#151)
  • 提升数据同步流程的稳定性 (#155, #156, #135, #133)
  • 升级依赖 (#149, #148, #130, #119, #117)
  • 同步 antd 元数据至 v6.4.4 (diff)

Security Fixes

  • Upgrade `qs` to 6.15.2 resolves CVE-2026-8723
  • Fix potential shell injection in build scripts
View diff on GitHub

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Share on X Share on Bluesky

Track Ant-design/CLI

Get notified when new releases ship.

Sign up free

About Ant-design/CLI

All releases →

Related context

Related tools

Related CVEs

Beta — feedback welcome: [email protected]