AI-SDLC Framework command injection vulnerability

The AI-SDLC Framework versions 0.31.2 and earlier contain a command injection vulnerability. This vulnerability arises because an unvalidated “repo” parameter is inserted into commands such as gh issue view or gh pr view executed via execSync. Attackers can exploit this by providing shell...

CVE-2026-8663

OS Command Injection vulnerability in Rapid7 InsightConnect RPM Plugin on Linux allows authenticated attackers to execute arbitrary OS commands via the repo, key, or name parameters due to insufficient input sanitization in shell command construction...