CVE-2026-49988
1 advisory.
npm/repomix CVE-2026-49988: medium, EPSS 0.18%
repomix: attach_packed_output can bypass file-read secret scanning for supported local files
Action: Upgrade repomix to 1.14.1 or later.
npm i repomix@1.14.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.14.1 | - |
Fixed versions
| 1.14.1 |
Sources
- osv: GHSA-hwpp-h97w-2h3j
- https://github.com/yamadashy/repomix/security/advisories/GHSA-hwpp-h97w-2h3j
- https://github.com/yamadashy/repomix
CVE-2026-49988 · published · modified · JSON