Skip to content
OpenAdvisories

Vendor

electrovir

1 known vulnerabilities.

Products

augment-vir 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.8
    CVE-2026-63496

    augment-vir: Shell Command Injection in `grep()` via Unsanitized `searchPattern`

    augment-vir is a collection of helper functions. Prior to version 31.73.5, the grep() function exported by @augment-vir/node inserts caller-controlled search patterns directly into a double-quoted shell command string without sanitization (grep.ts:310). When …

    electrovir augment-vir