Skip to content
OpenAdvisories

Vendor

repomix

2 known vulnerabilities.

Products

repomix 2
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.3
    CVE-2026-59702

    repomix - Server-Side Request Forgery via Unvalidated Repository URLs in POST /api/pack

    repomix contains a server-side request forgery vulnerability in the POST /api/pack endpoint that allows unauthenticated attackers to make arbitrary outbound requests. The endpoint fails to properly validate http://, https://, and file:// URLs before passing t…

    repomix repomix