CVE-2026-63496

augment-vir is a collection of helper functions. Prior to version 31.73.5, the grep function exported by @augment-vir/node inserts caller-controlled search patterns directly into a double-quoted shell command string without sanitization grep.ts:310. When the constructed command is passed to spawn...

CVE-2026-63496

The augment-vir helper functions library, specifically the @augment-vir/node package, is vulnerable to arbitrary OS command execution prior to version 31.73.5 . The root cause is located in the grep() function (grep.ts:310), which inserts caller-controlled search patterns into a double-quoted she...

EUVD-2026-120443

augment-vir is a collection of helper functions. Prior to version 31.73.5, the grep function exported by @augment-vir/node inserts caller-controlled search patterns directly into a double-quoted shell command string without sanitization grep.ts:310. When the constructed command is passed to spawn...

CVE-2026-63496: electrovir augment-vir: augment-vir is a collection of helper functions

augment-vir is a collection of helper functions. Prior to version 31.73.5, the grep function exported by @augment-vir/node inserts caller-controlled search patterns directly into a double-quoted shell command string without sanitization grep.ts:310. When the constructed command is passed to spawn...