Ghostwire

CVE-2026-49987: repomix Vulnerable to Command Injection (RCE) via `--remote-branch` Argument Injection

HIGH CVSS 8.8 Exploit Available

Published: July 1, 2026 | Last Modified: July 1, 2026

Description

repomix Vulnerable to Command Injection (RCE) via `--remote-branch` Argument Injection

Ghostwire Analysis — What This Means Practically

This analysis is generated by Ghostwire from NVD, CISA KEV, EPSS, and open-source intelligence data. Verify findings through primary sources before acting.

References