Lucene search
+L

2454 matches found

Cvelist
Cvelist
•added 2026/11/09 8:55 p.m.•10 views

CVE-2026-63496 augment-vir: Shell Command Injection in `grep()` via Unsanitized `searchPattern`

augment-vir is a collection of helper functions. Prior to version 31.73.5, the grep function exported by @augment-vir/node inserts caller-controlled search patterns directly into a double-quoted shell command string without sanitization grep.ts:310. When the constructed command is passed to spawn...

7.8CVSS0.00184EPSS
SaveExploits0References3
Rows per page
Query Builder