CVE-2026-49987
1 advisory.
npm/repomix CVE-2026-49987: high 8.8
repomix Vulnerable to Command Injection (RCE) via `--remote-branch` Argument Injection
Action: Upgrade repomix to 1.14.1 or later.
npm i repomix@1.14.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.14.1 | - |
Fixed versions
| 1.14.1 |
Sources
- osv: GHSA-9mm9-rqhj-j5mx
- https://github.com/yamadashy/repomix/security/advisories/GHSA-9mm9-rqhj-j5mx
- https://github.com/yamadashy/repomix
CVE-2026-49987 · published · modified · JSON