AI-SDLC Framework command injection vulnerability

The AI-SDLC Framework versions 0.31.2 and earlier contain a command injection vulnerability. This vulnerability arises because an unvalidated “repo” parameter is inserted into commands such as gh issue view or gh pr view executed via execSync. Attackers can exploit this by providing shell...