{"action":"No fix published. Pin and monitor.","affected":[],"component":"automagik-genie","cve_ids":["CVE-2026-30635"],"ecosystem":"npm","epss":0.01008,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-64vr-4gr2-m642","id":"tcs_01M5KF5KWETV5SR9BTEHPCGTPB","modified_at":"2026-05-18T15:41:31.167955Z","published_at":"2026-05-11T18:31:45Z","references":["https://osv.dev/vulnerability/GHSA-64vr-4gr2-m642","https://nvd.nist.gov/vuln/detail/CVE-2026-30635","https://gist.github.com/spdc-elm/3ddecd10ffa85c5963ab7fe531619875","https://github.com/automagik-dev/genie"],"severity":{"label":"high","score":8.1},"sources":[{"source":"osv","source_id":"GHSA-64vr-4gr2-m642","url":"https://osv.dev/vulnerability/GHSA-64vr-4gr2-m642"}],"summary":"automagik-genie has a command injection vulnerability"}