CVE-2026-16492

creationtimestamp| type| source ---|---|--- 2026-07-22 03:19:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr7ehohfv32e...

CVE-2026-16492 umijs umi GIT File Helper getFileGitIno.ts git.getFileCreateInfo os command injection

A weakness has been identified in umijs umi up to 4.6.63. The affected element is the function git.getFileCreateInfo of the file packages/utils/src/getFileGitIno.ts of the component GIT File Helper. This manipulation causes os command injection. The exploit has been made available to the public a...