Arbitrary Code Injection

Overview 9router is a 9Router CLI - Start and manage 9Router server Affected versions of this package are vulnerable to Arbitrary Code Injection via the POST /api/cli-tools/hermes-settings endpoint, where unsanitized user-supplied input is written directly into the Hermes Agent config.yaml file. ...