6 matches found
CVE-2026-63496
augment-vir is a collection of helper functions. Prior to version 31.73.5, the grep function exported by @augment-vir/node inserts caller-controlled search patterns directly into a double-quoted shell command string without sanitization grep.ts:310. When the constructed command is passed to spawn...
CVE-2026-63496
The augment-vir helper functions library, specifically the @augment-vir/node package, is vulnerable to arbitrary OS command execution prior to version 31.73.5 . The root cause is located in the grep() function (grep.ts:310), which inserts caller-controlled search patterns into a double-quoted she...
EUVD-2026-120443
augment-vir is a collection of helper functions. Prior to version 31.73.5, the grep function exported by @augment-vir/node inserts caller-controlled search patterns directly into a double-quoted shell command string without sanitization grep.ts:310. When the constructed command is passed to spawn...
CVE-2026-63496 augment-vir: Shell Command Injection in `grep()` via Unsanitized `searchPattern`
augment-vir is a collection of helper functions. Prior to version 31.73.5, the grep function exported by @augment-vir/node inserts caller-controlled search patterns directly into a double-quoted shell command string without sanitization grep.ts:310. When the constructed command is passed to spawn...
PT-2026-141126
augment-vir is a collection of helper functions. Prior to version 31.73.5, the grep function exported by @augment-vir/node inserts caller-controlled search patterns directly into a double-quoted shell command string without sanitization grep.ts:310. When the constructed command is passed to spawn...
CVE-2026-63496: electrovir augment-vir: augment-vir is a collection of helper functions
augment-vir is a collection of helper functions. Prior to version 31.73.5, the grep function exported by @augment-vir/node inserts caller-controlled search patterns directly into a double-quoted shell command string without sanitization grep.ts:310. When the constructed command is passed to spawn...