npm/automagik-genie CVE-2026-30635: high 8.1, EPSS 1.01%

automagik-genie has a command injection vulnerability

Action: No fix published. Pin and monitor.

Affected

No affected ranges in the source.

Fixed versions

No fixed version in the source.

Sources

• osv: GHSA-64vr-4gr2-m642
• https://nvd.nist.gov/vuln/detail/CVE-2026-30635
• https://gist.github.com/spdc-elm/3ddecd10ffa85c5963ab7fe531619875
• https://github.com/automagik-dev/genie

CVE-2026-30635 · published 2026-05-11T18:31:45Z · modified 2026-05-18T15:41:31.167955Z · JSON