repomix vulnerabilities

1 known vulnerability in repomix from Yamadashy. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  repomix: Improper Neutralization of Argument Delimiters in a Command

  CVE-2026-49987Jul 15, 2026Yamadashy

  Repomix is a tool that packs repositories into AI-friendly files. Prior to 1.14.1, src/core/git/gitCommand.ts execGitShallowClone passes the --remote-branch value directly to git fetch and git checkout without validation or --end-of-options, allowing --upload-