2454 matches found
CVE-2026-63496 augment-vir: Shell Command Injection in `grep()` via Unsanitized `searchPattern`
augment-vir is a collection of helper functions. Prior to version 31.73.5, the grep function exported by @augment-vir/node inserts caller-controlled search patterns directly into a double-quoted shell command string without sanitization grep.ts:310. When the constructed command is passed to spawn...
7.8CVSS0.00184EPSS
SaveExploits0References3
20